Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- # ----------------------------------------------------------------------
- # | Reducing MIME type security risks |
- # ----------------------------------------------------------------------
- # Prevent some browsers from MIME-sniffing the response.
- #
- # This reduces exposure to drive-by download attacks and cross-origin
- # data leaks, and should be left uncommented, especially if the server
- # is serving user-uploaded content or content that could potentially be
- # treated as executable by the browser.
- #
- # http://www.slideshare.net/hasegawayosuke/owasp-hasegawa
- # http://blogs.msdn.com/b/ie/archive/2008/07/02/ie8-security-part-v-comprehensive-protection.aspx
- # https://msdn.microsoft.com/en-us/library/ie/gg622941.aspx
- # https://mimesniff.spec.whatwg.org/
- <IfModule mod_headers.c>
- Header set X-Content-Type-Options "nosniff"
- </IfModule>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement