jsocol/commonware — pull request #14 by reedloden (2012-09-09 19:21:41+00:00)
Title: Add support for the X-XSS-Protection and X-Content-Type-Options headers

* Add the X-XSS-Protection header to prevent simple XSS attacks
and enforce the blocking (rather than the rewriting) mode.

* Add the X-Content-Type-Options header to prevent browsers sniffing
the MIME type away from the declared Content-Type.