如何检查网站是否缺少阻止内容类型嗅探的标题 [英] How to check if website is missing header that prevents content type sniffing

问题描述

我想知道如果网站缺少内容类型嗅探标题，该如何检查域名。服务器不是我的服务器，所以我无法在其中创建php文件或编辑 .htaccess 文件。我知道可以用git bash和 curl 检查php版本，但是可以用 curl 来检测缺少的标头太？还是有其他方法？ （当然只有法律）

I want to know how can i check with domain name if website is missing content type sniffing header. Server is not mine, so I can not create php files inside or edit .htaccess file. i know that checking php version is possible with git bash and curl but is it possible to detect that missing header with curl too? or there is other way? (Only LEGAL of course)

推荐答案

当今所有主流互联网浏览器（Chrome，Fx，MSIE ...）都可以让您看到它的开发人员使用工具来进行网络传输，包括每个请求和每个响应的标头：

Every major internet browser today (Chrome, Fx, MSIE...) lets you see in its developer tools the network transfers, including headers with each request and each response:

这篇关于如何检查网站是否缺少阻止内容类型嗅探的标题的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！