X-Content-Type-Options-Vulnerability/EN/Positive

The HTTP header is set correctly.