From d83acebb4cacf38c0e06bb7a47624277f1a34342 Mon Sep 17 00:00:00 2001 From: Dragory <2606411+Dragory@users.noreply.github.com> Date: Wed, 19 May 2021 11:31:26 +0300 Subject: [PATCH] Disable MIME type sniffing in archives --- backend/src/api/archives.ts | 1 + 1 file changed, 1 insertion(+) diff --git a/backend/src/api/archives.ts b/backend/src/api/archives.ts index 83fdbf83..b1330a98 100644 --- a/backend/src/api/archives.ts +++ b/backend/src/api/archives.ts @@ -30,6 +30,7 @@ export function initArchives(app: express.Express) { } res.setHeader("Content-Type", "text/plain; charset=UTF-8"); + res.setHeader("X-Content-Type-Options", "nosniff"); res.end(body); }); }