MediaWiki:Config-uploads-security-headers

Warning: Requests for images in your uploads directory should answer with the HTTP header $1 to protect browsers from potentially unsafe files. It is highly recommended to configure appropriate response headers on your webserver before enabling uploads.