title: How to add X-Content-Type-Options to tomcat configuration
body: <p>My client want me to fix Web App vulnerability of My Web App
   below is message about vulnerability of My Web App</p>
  
  <blockquote>
    <p>The Anti-MIME-Sniffing header X-Content-Type-Options was not set to 'nosniff'</p>
    
    <p>This check is specific to Internet Explorer 8 and Google Chrome. Ensure each page sets a >Content-Type header and the X-CONTENT-TYPE-OPTIONS if the Content-Type header is unknown</p>
  </blockquote>
  
  <p>Although I already found some solution to this issue , I am looking for solution from tomcat configuration.
  Is it possible to make changes to tomcat configuration to accomplish this? </p>
  
  <p>please give me any idea.</p>