Disable Automatic Resource Type Detection

This guide explains how to protect a website from malicious exploitation of MIME Sniffing. Some internet browsers (including Chrome and Internet Explorer) have a feature (MIME-Type sniffing) that automatically detects the type of a web resource. Therefore, a resource declared as an image could be interpreted as a script if its content suggests so.

If you want to guard against this risk, the solution is to disable automatic resource type detection via the .htaccess file of your websites. Learn more

Disable MIME-Type Sniffing

1. Open the .htaccess file of the relevant site using FTP Manager or an FTP software
2. Add the following code, starting with:
   

   <ifmodule mod_headers.c="">    

3. Add the following code:
   Header always set X-Content-Type-Options "nosniff"
   
4. End with:
   

   </ifmodule>    

5. Save the .htaccess file