The X-Content-Type-Options are a kind of security header with the value nosniff, which prevents Google Chrome, Internet Explorer and Firefox from reading a response outside of the declared content type via MIME sniffing.

This security header protects the content and reduces the risk of drive-by downloads.