Use the X-Content-Type-Options HTTP Header to add security to your website by preventing files of one type being downloaded and used as another type.