2
0
Fork 0
mirror of https://github.com/phanan/htaccess.git synced 2018-11-08 13:39:40 +01:00

Update README.md

Corrected source
This commit is contained in:
Michael McGinnis 2017-10-12 22:55:06 -05:00 committed by GitHub
parent 849a9bbae9
commit 6a71561f56

View file

@ -341,7 +341,7 @@ Header always set X-Xss-Protection "1; mode=block"
### Prevents Mime-Sniffing the Incorrect Content-Type
This reduces the risk of a file, such as an cleverly-misnamed executable, being treated as a different content-type by the browser than the one being declared by the server. It also reduces exposure to drive-by downloads.
[Source](https://scotthelme.co.uk/hardening-your-http-response-headers/#x-xss-protection)
[Source](https://scotthelme.co.uk/hardening-your-http-response-headers/#x-content-type-options)
``` apacheconf
Header always set X-Content-Type-Options "nosniff"
```