From 36f3c27ebdf4c3c1d1f82f946f690580715f6036 Mon Sep 17 00:00:00 2001
From: Jake Jarvis <jake@jarv.is>
Date: Sat, 19 Oct 2019 17:25:07 -0400
Subject: [PATCH] add X-Content-Type-Options header manually

---
 index.js | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/index.js b/index.js
index c8fb40c..a6870bc 100644
--- a/index.js
+++ b/index.js
@@ -11,7 +11,8 @@ async function handle(request) {
     "Expires": "Thu, 01 Jan 1970 00:00:01 GMT",
     "Content-Security-Policy": "default-src 'none';",
     "Access-Control-Allow-Origin": "*",
-    "Access-Control-Allow-Methods": "GET, OPTIONS",
+    "Access-Control-Allow-Methods": "GET, HEAD, OPTIONS",
+    "X-Content-Type-Options": "nosniff",
     "X-Did-You-Know": "You can use \"curl -4 simpip.com\" or \"curl -6 simpip.com\" to get either address!",
     "X-Source-Code": "https://github.com/jakejarvis/simpip"
   }