Kazap TechnologiesYLB ScoreYour Local Business Score

YLB Score › The checks, explained › Part III, Will a stranger trust you?

Files are not locked to what they say they are

A small setting stops a browser being tricked into treating an ordinary file as a script. It costs nothing and breaks nothing.

One line.

Worth about 1 point of your 100 for a typical businessAbout 1 hour, by your web person

See for yourself

securityheaders.com lists X-Content-Type-Options.

How to fix it

  1. Have your web person add the setting.
The technical version, for your web person

X-Content-Type-Options. The header with the value nosniff.

What the check reads. Presence of the X-Content-Type-Options response header.

This is one of the checks in a YLB Score report. Every report is free, read by a person before it goes out, and written so that you can act on it without us. Ask for yours.