Fix cross-site scripting in status_json by specifying nosniff and app/json content
Merge pull request #1258 from wmswms/eight

Bugfix 2943: Fix cross-site scripting in status_json by specifying nosniff and app/js...

Fixes ticket:2943