adding headers in embedded jetty server
<p>I'm checking security issue using OWASP ZAP and I have to resolve those two issues : </p>

<blockquote>
  <p>"X-Content-Type-Options Header Missing" </p>
</blockquote>

<p>and </p>

<blockquote>
  <p>"Incomplete or No Cache-control and Pragma HTTP Header Set".</p>
</blockquote>

<p>I'm working with ZK framework and an embed jetty server. I tried to add those headers to the jetty server but  the security tests are always failed</p>

<pre><code>webAppContext.getServletHandler().getServletContext().setInitParameter("cacheControl", "private, no-cache, no-store, proxy-revalidate, no-transform");
webAppContext.getServletHandler().getServletContext().setInitParameter("Pragma", "no-cache");
webAppContext.getServletHandler().getServletContext().setInitParameter("Expires", "0");
</code></pre>

<p>and I did not found a way to change the <code>contentType</code> in Jetty like <code>text/html; charset=UTF-8; X-Content-Type-Options=nosniff</code></p>