The only defined value, "nosniff", prevents Internet Explorer from MIME-sniffing a response away from the declared content-type.

The only defined value, "nosniff", prevents Internet Explorer from MIME-sniffing a response away from the declared content-type. This also applies to Google Chrome, when downloading extensions.

: nosniff