Adding the X-Content-Type-Options header

This header stops a browser from trying to MIME-sniff the content type and forces it to stick with the declared content-type. We can add this middleware as follows, in the Configure method of the Startup class:

app.UseXContentTypeOptions();