DevUtilsNow
Browse tools
// http header · security header

X-Content-Type-Options

Stop MIME-type sniffing

What the X-Content-Type-Options header does

X-Content-Type-Options: nosniff stops the browser from guessing (MIME-sniffing) a response's type and instead trusts the declared Content-Type. It prevents attacks that rely on a browser treating, say, an image as a script.

Example

X-Content-Type-Options: nosniff

Where it's used

X-Content-Type-Options is a security header. Security headers tell the browser to turn on protections against common web attacks.

Other security headers

Strict-Transport-Security Content-Security-Policy X-Content-Type-Options X-Frame-Options Referrer-Policy Permissions-Policy
TOOL

HTTP Headers Parser

Turn a block of raw headers into readable JSON.

REFERENCE

All HTTP Headers

Common request, response, caching, CORS, and security headers.

GUIDE

How to Read and Parse HTTP Headers

The anatomy of headers and how to work with them.