diff --git a/deploy/convert_server.py b/deploy/convert_server.py
index bfc6520..99b2a2b 100755
--- a/deploy/convert_server.py
+++ b/deploy/convert_server.py
@@ -356,6 +356,7 @@ class Handler(BaseHTTPRequestHandler):
             self.send_response(200)
             self.send_header("Content-Type", "application/javascript; charset=utf-8")
             self.send_header("Content-Length", str(len(js)))
+            self.send_header("X-Content-Type-Options", "nosniff")
             self._send_cors()
             self.end_headers()
             self.wfile.write(js)