headers->set('X-Content-Type-Options', 'nosniff', false); return $response; } }