contentTypeOptions property

String? contentTypeOptions

Stops the browser second-guessing Content-Type. Without it, a user-uploaded file served as text/plain can be sniffed as HTML and executed in the site's origin.

Implementation

final String? contentTypeOptions;