Custom HTTP Headers like "X-Content-Type-Options: nosniff" has to be added to HTTP request or response.
In most scenarios custom HTTP Headers are providing additional layer of security.
Custom HTTP Header can be added via VPM.
The below example provides the steps to configure HTTP Header "X-Content-Type-Options: nosniff" on HTTP Request forwarded to OCS: