# /etc/apache2/conf-available/no-sniff.conf Header always set X-Content-Type-Options "nosniff"