abhishek-ram/django-pyas2

X-Content-Type-Options header Error: nosniff

Closed this issue · 2 comments

Customer asked to stop sending the X-Content-Type-Options header or any other non-compliant headers in the AS2 MDN.
See this link : https://www.ibm.com/support/pages/node/294385
Can we disable this param when sending the MDN reciept.
Thanks,

@AvatarBhola : this is a django setting. You should put in your settings.py following:
SECURE_CONTENT_TYPE_NOSNIFF = False

Also see: https://docs.djangoproject.com/en/3.2/ref/settings/#secure-content-type-nosniff
As of version 3 of django, the default changed to "True".

Thank you! this resolved this part of the issue.