Web Security · Middle · Question 69 of 75

What does `X-Content-Type-Options: nosniff` do?

✓Correct answer: Stops the browser from guessing a different content type than the one declared, for example treating text as script
2Prevents search engines from indexing the page
3Blocks the page from being cached

Explanation

Without it, an uploaded file served as text/plain could be sniffed and run as HTML or JavaScript in some cases.

Further reading

Test yourself

Take the Web Security · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.