To ensure you match how XenForo serves files, add the following headers into your site config where appropriate:
Code:add_header X-Frame-Options SAMEORIGIN; add_header X-Content-Type-Options nosniff;
Seems
Code:
add_header X-Frame-Options SAMEORIGIN;