Header Security
Shopify X-Content-Type-Options Header Check
The X-Content-Type-Options header prevents browsers from interpreting files with an incorrect MIME type. Check its presence to protect your Shopify store.
What this test checks
This test checks for the presence of the X-Content-Type-Options: nosniff header on your Shopify store. This header prevents the browser from interpreting a file with a MIME type different from that declared, protecting against MIME sniffing attacks. Its absence exposes your site to risks of malicious script execution.
Our recommendation
Add the X-Content-Type-Options: nosniff header in your Shopify server configuration. Use Shopify's built‑in security settings to configure this header. Test your configuration with browser developer tools.
Security tests
Read more
Header Security