No Sniffing Allowed

The X-Content-Type-Options header is set.

css.js made this visible

css.css made this red

Valid Content-Types for Stylesheets:

• "text/css"

Valid Content-Types for images:

• have to start with “image/"

Valid Content-Types for Scripts:

• "application/javascript"
• "application/x-javascript"
• "application/ecmascript"
• "application/json"
• "text/ecmascript"
• "text/javascript"
• "text/json"

Reference

Mozilla Guide

Back to home