What is X-XSS-PROTECTION?

DaRecordon

Well-known member
Registered
Joined
Oct 7, 2016
Messages
247
Points
18
I checked my website with any security tools and its telling me this

X-XSS-PROTECTION
The header was not sent by the server, enabling XSS exploitation if not restricted by the client's browser.

What is X-XSS-PROTECTION? and how to have it for my hosting server? is it necessary?
 

VirtuBox

Well-known member
Registered
Joined
May 3, 2016
Messages
1,622
Points
83
I checked my website with any security tools and its telling me this

X-XSS-PROTECTION
The header was not sent by the server, enabling XSS exploitation if not restricted by the client's browser.

What is X-XSS-PROTECTION? and how to have it for my hosting server? is it necessary?
Yes, X-XSS-Protection header sets the configuration for the cross-site scripting filters built into most browsers.
To add it with apache add this in your vhost configuration :

Code:
[COLOR=#333333][FONT=monospace]Header [/FONT][/COLOR][COLOR=#333333][FONT=monospace][B]set[/B][/FONT][/COLOR][COLOR=#333333][FONT=monospace] X-XSS-Protection [/FONT][/COLOR][COLOR=#DD1144][FONT=monospace]"1; mode=block"[/FONT][/COLOR]
Or with Nginx

Code:
add_header X-XSS-Protection "1; mode=block";
 
Older Threads
Replies
11
Views
5,152
fwh
Replies
5
Views
5,924
Replies
19
Views
11,377
Replies
29
Views
15,062
Newer Threads
Recommended Threads
Replies
23
Views
32,785
Replies
8
Views
7,478
m19
Replies
7
Views
1,948

Latest Hosting OffersNew Reviews

Sponsors

Tag Cloud

You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.

Top