Add a nosniff header
Configure IIS to add a nosniff header to HTTP responses from InForm by running the following command from the administrator command prompt on the InForm application server:
"appcmd.exe set config /section:httpProtocol /+customHeaders.["name='X-Content-Type-Options',value='nosniff'"] /commit:apphost"