The [Don't Sniff Mimetype docs](https://helmetjs.github.io/docs/dont-sniff-mimetype/) should have a link to <https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options>.