id: missing-x-content-type-options

info:
  name: X-Content-Type-Options unidentified
  author: G4L1T0 and @convisoappsec
  severity: info
  description: Check for X-Content-Type-Options header
  tags: misc

requests:
  - method: GET
    path:
      - '{{BaseURL}}'
    redirects: true
    matchers:
      - type: dsl
        dsl:
          - '!contains(tolower(all_headers), ''x-content-type-options'')'