From 328a8a980868c5d69756db9eb375cb6ea29de504 Mon Sep 17 00:00:00 2001 From: Matt Pass Date: Mon, 21 Apr 2014 08:15:34 +0100 Subject: [PATCH] Adjustment to value, should just be nosniff --- lib/headers.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/headers.php b/lib/headers.php index 4074b56..2eb16e6 100644 --- a/lib/headers.php +++ b/lib/headers.php @@ -16,5 +16,5 @@ if ($_REQUEST && $_REQUEST["csrf"] !== $_SESSION["csrf"]) { header("X-Frame-Options: SAMEORIGIN"); // Only frames of same origin header("X-XSS-Protection: 1; mode=block"); // Turn on IE8-9 XSS prevention tools // header("X-Content-Security-Policy: allow 'self'"); // Only allows JS on same domain & not inline to run -header("X-Content-Type-Options: 1; nosniff"); // Prevent MIME based attacks +header("X-Content-Type-Options: nosniff"); // Prevent MIME based attacks ?> \ No newline at end of file