php - How to check if website is missing header that prevents content type sniffing

Question

I want to know how can i check with domain name if website is missing content type sniffing header. Server is not mine, so I can not create php files inside or edit .htaccess file. i know that checking php version is possible with git bash and curl but is it possible to detect that missing header with curl too? or there is other way? (Only LEGAL of course)

Answer 1

You can use the -D option wit curl:

-D, --dump-header <filename> Write the received headers to <filename>



curl http://whatever.com -D myheaders.txt

Then open myheaders.com and look for the header you want.