Use secure mimetype for content delivery

Adds some hardening against potential CSP bypassed.
Merge pull request #10938 from owncloud/useSecureMimetype

Use secure mimetype for content delivery