Set X-Content-Type-Options "nosniff" header.