Return "application/octet-stream" as hardocded mimetype

While this has some disadvantages (e.g. Nautilus won't show applications that can open the filetype) it is the only reliable way to prevent a CSP bypass.
I consider that there are a lot more benefits than drawbacks.