Several AJAX toolkit controls, SeaDragon, HtmlEditorExtender, Twitter etc. have Web Resources of MIME type "img/png". This is incorrect, and these fail to load in IE with
X-Content-Type-Options: nosniff
Should be changed to "image/png"
X-Content-Type-Options: nosniff
Should be changed to "image/png"