P2 · MediumSecurity
Missing X-Content-Type-Options
No nosniff header
Code: missing_x_content_type_options
Why it matters
No nosniff header. Browsers and users expect sites to be secure. Missing protections expose visitors to data theft, phishing, and loss of trust.
How to fix
Add X-Content-Type-Options header
http# Nginx — add inside your server {} block
add_header X-Content-Type-Options "nosniff" always;
# Apache — add to .htaccess or <VirtualHost>
Header always set X-Content-Type-Options "nosniff"Related checks in Security
Run a free scan to check your site
Get a complete audit in under 2 minutes. No account required.
Start Free Scan