Vulnerabilty "web server allows MIME sniffing"

Will this Irule will help me into this ?

when HTTP_RESPONSE { HTTP::header X-Content-Type-Options nosniff }

Thanks and Regards Parveez

Hi,

this irule will help you, but this header is not to be supported by old browsers (for ex. IE6, IE7).

I think you need;

when HTTP_RESPONSE { HTTP::header insert X-Content-Type-Options "nosniff" }

Given that the older browsers don't do MIME sniffing, the iRule should remove the alert from your next scan.