What is X-XSS-PROTECTION?

DaRecordon

Well-known member
Registered
Joined
Oct 7, 2016
Messages
242
Points
18
I checked my website with any security tools and its telling me this

X-XSS-PROTECTION
The header was not sent by the server, enabling XSS exploitation if not restricted by the client's browser.

What is X-XSS-PROTECTION? and how to have it for my hosting server? is it necessary?
 

VirtuBox

Well-known member
Registered
Joined
May 3, 2016
Messages
1,622
Points
83
I checked my website with any security tools and its telling me this

X-XSS-PROTECTION
The header was not sent by the server, enabling XSS exploitation if not restricted by the client's browser.

What is X-XSS-PROTECTION? and how to have it for my hosting server? is it necessary?
Yes, X-XSS-Protection header sets the configuration for the cross-site scripting filters built into most browsers.
To add it with apache add this in your vhost configuration :

Code:
[COLOR=#333333][FONT=monospace]Header [/FONT][/COLOR][COLOR=#333333][FONT=monospace][B]set[/B][/FONT][/COLOR][COLOR=#333333][FONT=monospace] X-XSS-Protection [/FONT][/COLOR][COLOR=#DD1144][FONT=monospace]"1; mode=block"[/FONT][/COLOR]
Or with Nginx

Code:
add_header X-XSS-Protection "1; mode=block";
 
Older Threads
Replies
11
Views
3,747
fwh
Replies
5
Views
4,573
Replies
19
Views
8,924
Replies
24
Views
11,025
Newer Threads

Latest Hosting OffersNew Reviews

Sponsors

Tag Cloud

You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.

Top