Skip to content
mistakes.show
793Kissues on 68,769 sites
  1. Home
  2. Mistakes
  3. No X-Content-Type-Options
SecurityMinor

No X-Content-Type-Options

Browsers may guess content types, which enables some injection tricks.

54%of Global websites

By market

  1. Global54%
  2. United Kingdom44%
  3. Netherlands45%
  4. Italy59%
  5. Spain54%
  6. Japan61%
  7. Latin America56%

How to fix

  1. 1Add X-Content-Type-Options: nosniff to all responses.

Our crawler: 68,769 sites · Global · updated Oct 23, 2026 · Methodology

Found mistakes on your site?

We can fix them in one sprint. Reply within one business day.