Notes.ini Entry



Name:

    HTTP_Disable_X_Content_Type_Options_NoSniff

Syntax

    HTTP_Disable_X_Content_Type_Options_NoSniff=0/1

Applies to:

    Servers

Add-on:


    First Release:

      9.0.1 FP5

    Obsolete since:


      Category:

        HTTP

      Default:

        None

      UI equivalent:

        None

      Description:

      SPPPBMDGUF HTTP server - Classic Web Applications may no longer work because of the X-Content-Type-Options: nosniff http header that is always included in an http response for Domino NSF application urls for increased security. Added the following notes.ini to disable the sending of the http X-Content-Type-Options: nosniff header. If the following notes.ini is specified then the http header will not be included by default in the http response. HTTP_DISABLE_X_CONTENT_TYPE_OPTIONS_NOSNIFF=1