From 0b278322927a6258243e27ffe4e390cbc7a20c92 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E2=80=9CNaeel=E2=80=9D?= <tazet@narod.ru>
Date: Wed, 24 Jun 2026 18:23:19 +0400
Subject: [PATCH] v1.0.176: X-Content-Type-Options nosniff for ORB fix

---
 deploy/convert_server.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/deploy/convert_server.py b/deploy/convert_server.py
index bfc6520..99b2a2b 100755
--- a/deploy/convert_server.py
+++ b/deploy/convert_server.py
@@ -356,6 +356,7 @@ class Handler(BaseHTTPRequestHandler):
             self.send_response(200)
             self.send_header("Content-Type", "application/javascript; charset=utf-8")
             self.send_header("Content-Length", str(len(js)))
+            self.send_header("X-Content-Type-Options", "nosniff")
             self._send_cors()
             self.end_headers()
             self.wfile.write(js)