Set X-Content-Type-Options to exactly nosniff on Shopify
Why it matters
nosniff is the only value browsers understand, so any other value is ignored and type guessing stays on. A second copy added by another layer often causes it.
The fix
Not possible on Shopify. Shopify sets the storefront's response headers and stores cannot change them.
Related
- Reported by the X-Content-Type-Options check
- Send X-Content-Type-Options nosniff
Scan your domain to see whether this applies to you.