[1.2.x] Add X-Content-Type-Options header to the automated HTTP responses

[TharmiganK]

Description

This task is to add the X-Content-Type-Options: nosniff header to the automated HTTP responses when the resource is not found. This is to block content sniffing from the response payload which has the resource path information. This will block browsers to execute <script> or <style> if the resource path contains them.

Example response for resource not found:

no matching service found for path : /<script>alert(sessionStorage.getItem("0-ef9-ui"))</script>

Describe your task(s)

Add the above header to the automated error responses

Related area

-> Standard Library

Related issue(s) (optional)

No response

Suggested label(s) (optional)

No response

Suggested assignee(s) (optional)

No response