diff --git a/lib/middleware/header.js b/lib/middleware/header.js
index ff4272cbf4..ff92f7820e 100644
--- a/lib/middleware/header.js
+++ b/lib/middleware/header.js
@@ -5,6 +5,7 @@ const headers = {
     'Access-Control-Allow-Methods': 'GET',
     'Content-Type': 'application/xml; charset=utf-8',
     'Cache-Control': `public, max-age=${config.cache.routeExpire}`,
+    'X-Content-Type-Options': 'nosniff',
 };
 if (config.nodeName) {
     headers['RSSHub-Node'] = config.nodeName;