X-Content-Type-Options

nosniff stops browsers guessing a different type than Content-Type says.

Header name, or pasted headers

Explained

Examples

Example

X-Content-Type-Options: nosniff

With nosniff, a script served as text/plain will not run, so the Content-Type must be right.

Defined in Fetch standard.