Send 'nosniff' header (fixes #97)

Change-Id: If9670a66a9402da77616a362ceda8ea47aceaa75
diff --git a/Changes b/Changes
index e991976..444b03b 100755
--- a/Changes
+++ b/Changes
@@ -10,6 +10,7 @@
         - Added nonce helper to CSP plugin.
         - Remove no-js class in nonced inline script.
         - Introduce HSTS header for https_only conf.
+        - Send 'nosniff' header.
 
 0.40 2020-12-17
         - Modernize ES and fix in-loops.