X-Git-Url: https://gitweb.ps.run/ps-cgit/blobdiff_plain/1c581a072651524f3b0d91f33e22a42c4166dd96..baa5ad1f80f56d3c0b0095bfb468fab28c9b4982:/ui-blob.c

diff --git a/ui-blob.c b/ui-blob.c
index 2cce11c..d388489 100644
--- a/ui-blob.c
+++ b/ui-blob.c
@@ -161,13 +161,14 @@ void cgit_print_blob(const char *hex, char *path, const char *head, int file_onl
 	}
 
 	buf[size] = '\0';
-	if (!ctx.page.mimetype) {
-		if (buffer_is_binary(buf, size))
-			ctx.page.mimetype = "application/octet-stream";
-		else
-			ctx.page.mimetype = "text/plain";
-	}
+	if (buffer_is_binary(buf, size))
+		ctx.page.mimetype = "application/octet-stream";
+	else
+		ctx.page.mimetype = "text/plain";
 	ctx.page.filename = path;
+
+	html("X-Content-Type-Options: nosniff\n");
+	html("Content-Security-Policy: default-src 'none'\n");
 	cgit_print_http_headers();
 	html_raw(buf, size);
 	free(buf);