I am working through a report of an automated vulnerability scanner. One Item is
Web Server Misconfiguration: Insecure Content-Type Setting ( 11359 )
It's about not returning the character-set for a given HTML page like so, for example:
HTTP/1.1 200 OK ... Content-Type: text/html; charset=utf-8 ...
the reported response in question only gives
HTTP/1.1 200 OK ... Content-Type: text/html ...