From 18f99e78f97d41178e480f1752e35ef9094fe29b Mon Sep 17 00:00:00 2001 From: Jianjun Zhu Date: Wed, 27 Mar 2019 10:19:06 +0800 Subject: [PATCH] Prevent web browsers from MIME sniffing. --- src/samples/conference/samplertcservice.js | 1 + 1 file changed, 1 insertion(+) diff --git a/src/samples/conference/samplertcservice.js b/src/samples/conference/samplertcservice.js index 201629d3..88e6650d 100644 --- a/src/samples/conference/samplertcservice.js +++ b/src/samples/conference/samplertcservice.js @@ -55,6 +55,7 @@ app.use(function(req, res, next) { res.header('Access-Control-Allow-Methods', 'POST, GET, PUT, PATCH, OPTIONS, DELETE'); res.header('Access-Control-Allow-Headers', 'origin, content-type'); res.header('Strict-Transport-Security', 'max-age=1024000; includeSubDomain'); + res.header('X-Content-Type-Options', 'nosniff'); if (req.method == 'OPTIONS') { res.send(200); } else {