diff --git a/app/api/evidence/[...path]/route.ts b/app/api/evidence/[...path]/route.ts
index f9a5e87..074f2c0 100644
--- a/app/api/evidence/[...path]/route.ts
+++ b/app/api/evidence/[...path]/route.ts
@@ -80,6 +80,7 @@ export async function GET(
       'Content-Length': String(stat.size),
       'Cache-Control': 'private, max-age=3600',
       'Content-Disposition': 'inline',
+      'X-Content-Type-Options': 'nosniff',
     },
   })
 }