X-Content-Type-Options-Vulnerability/EN/Solution Tips

Aus Siwecos
Version vom 17. April 2019, 12:42 Uhr von Siwebot (Diskussion | Beiträge)
(Unterschied) ← Nächstältere Version | Aktuelle Version (Unterschied) | Nächstjüngere Version → (Unterschied)
Wechseln zu: Navigation, Suche

nosniff;

Code example of an .htaccess file on an Apache webserver.

<IfModule mod_headers.c>
  # prevent mime based attacks like drive-by download attacks, IE and Chrome
  Header set X-Content-Type-Options "nosniff"
</IfModule>

Here is an example of an .htaccess file which will set the Header Scanner to green. (.htaccess example)