Search code examples
phpheadercontent-type

How to check if website is missing header that prevents content type sniffing


I want to know how can i check with domain name if website is missing content type sniffing header. Server is not mine, so I can not create php files inside or edit .htaccess file. i know that checking php version is possible with git bash and curl but is it possible to detect that missing header with curl too? or there is other way? (Only LEGAL of course)


Solution

  • Every major internet browser today (Chrome, Fx, MSIE...) lets you see in its developer tools the network transfers, including headers with each request and each response:

    enter image description here