Nikto Output
The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type
Description
Setting this header reduces exposure to drive-by download attacks and sites serving user uploaded content.
Solution
Set the X-Content-Type-Options: nosniff header