In order to prevent Cross-site scripting (XSS) in a private web application that supports image upload, I intend to reject browsers that are vulnerable to content sniffing.
Which browsers are currently vulnerable to this exploit?
PS. I'm aware of the
X-Content-Type-Options header, which isn't fully supported as far as I know.