False Positive: The X-Content-Type-Options header is not set

[happysalada]

Output of suspected false positive / negative

here is the full output

.: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/

in the headers plugin nikto tries to get the path "."
upon a 400 response, it will complain about the X-Content-Type-Options header not being set. the header plugin should only complain about missing headers on 200 response right ?

let me know if you would like more details.

(I'm running the freshly released 2.5.0

Thank you so much for making nikto!