'X-Content-Type-Options: nosniff' blocks xml external entity resources with improper MIME type

]> 'X-Content-Type-Options: nosniff' blocks xml external entity resources with improper MIME type