Everything filed under security. All posts.
Two headers now go out with every page of every customer site. nosniff stops a browser from guessing that a response is a web page when the declared type says it is an image.
