Reducing MIME Type Security Risks

By default, VMware Horizon 8 sends the header x-content-type-options: nosniff in its HTTP responses to help prevent attacks based on MIME-type confusion.

You can deactivate this feature by adding the following entry to the file locked.properties:

x-content-type-options=OFF