[*] Starting server.py on port 19234 [*] Raw response headers for /double: HTTP/1.1 200 OK X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff Content-Length: 230 Connection: close [*] Loading /double (TWO X-Content-Type-Options: nosniff headers) ... [*] Loading /single (ONE X-Content-Type-Options: nosniff header) ... ===== beacon log ===== ====================== [-] NOT VULNERABLE: no script execution on either endpoint (nosniff honoured for both).