http header X-Content-Type-Options: nosniff

assafmo · assafmo · commit 3c096bae7667 · 2019-04-30T15:59:35.000+03:00
diff --git a/main.go b/main.go
@@ -93,6 +93,7 @@ func initQueryHandler(dbPath string, queryString string, serverPort uint) (func(
 	return func(w http.ResponseWriter, r *http.Request) {
 		w.Header().Set("Server", "SQLiteQueryServer v"+version)
 		w.Header().Set("Access-Control-Allow-Origin", "*")
+		w.Header().Set("X-Content-Type-Options", "nosniff")
 
 		if r.URL.Path != "/query" {
 			http.Error(w, helpMessage, http.StatusNotFound)
