v1.0.176: X-Content-Type-Options nosniff for ORB fix

2026-06-24 18:23:19 +04:00
parent 8953af0c19
commit 0b27832292
1 changed files with 1 additions and 0 deletions
@@ -356,6 +356,7 @@ class Handler(BaseHTTPRequestHandler):
            self.send_response(200)
            self.send_header("Content-Type", "application/javascript; charset=utf-8")
            self.send_header("Content-Length", str(len(js)))
+            self.send_header("X-Content-Type-Options", "nosniff")
            self._send_cors()
            self.end_headers()
            self.wfile.write(js)