From 186c732ac02f54be21e7bc0f1830796e884b48b8 Mon Sep 17 00:00:00 2001
From: weeihan <whyap79@gmail.com>
Date: Thu, 23 Jul 2026 22:16:47 +0800
Subject: [PATCH] fix(storage): add X-Content-Type-Options: nosniff to evidence
 serve route

---
 app/api/evidence/[...path]/route.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/app/api/evidence/[...path]/route.ts b/app/api/evidence/[...path]/route.ts
index f9a5e87..074f2c0 100644
--- a/app/api/evidence/[...path]/route.ts
+++ b/app/api/evidence/[...path]/route.ts
@@ -80,6 +80,7 @@ export async function GET(
       'Content-Length': String(stat.size),
       'Cache-Control': 'private, max-age=3600',
       'Content-Disposition': 'inline',
+      'X-Content-Type-Options': 'nosniff',
     },
   })
 }