Imgur · Report #91366
Content Sniffing not enabled
Validstatus
1upvotes
9 Dec 2015disclosed
Summary
The HTTP header X-Content-Type-Options was not set to nosniff. This can cause some browsers to try to determine the content/encoding type of a response, which is an undesired behavior.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.