Glossary: Web App Security and Authentication

nosniff

Also written: X-Content-Type-Options

A header telling the browser to trust the declared Content-Type and not guess that a text file is a script.