Header set Content-Disposition "attachment" Header set X-Content-Type-Options "nosniff"