Description

Detects when the X-Content-Type-Options security header is missing from HTTP responses. This header prevents browsers from MIME-type sniffing, which could allow malicious file uploads to be interpreted as executable content. Missing this header can lead to MIME confusion attacks.

Detection Strategy

• Examines HTTP response headers from the web application

• Reports a vulnerability if the X-Content-Type-Options header is not present in the response

• The header should be set to 'nosniff' to properly protect against MIME-type sniffing attacks