What is X-XSS-PROTECTION?

DaRecordon · Apr 23, 2017

I checked my website with any security tools and its telling me this

X-XSS-PROTECTION
The header was not sent by the server, enabling XSS exploitation if not restricted by the client's browser.

What is X-XSS-PROTECTION? and how to have it for my hosting server? is it necessary?

Kieran2001 · Apr 23, 2017

Hello,

This website should be able to answer your questions;

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection

VirtuBox · Apr 23, 2017

DaRecordon said:
I checked my website with any security tools and its telling me this

X-XSS-PROTECTION
The header was not sent by the server, enabling XSS exploitation if not restricted by the client's browser.

What is X-XSS-PROTECTION? and how to have it for my hosting server? is it necessary?

Yes, X-XSS-Protection header sets the configuration for the cross-site scripting filters built into most browsers.
To add it with apache add this in your vhost configuration :

Code:

[COLOR=#333333][FONT=monospace]Header [/FONT][/COLOR][COLOR=#333333][FONT=monospace][B]set[/B][/FONT][/COLOR][COLOR=#333333][FONT=monospace] X-XSS-Protection [/FONT][/COLOR][COLOR=#DD1144][FONT=monospace]"1; mode=block"[/FONT][/COLOR]

Or with Nginx

Code:

add_header X-XSS-Protection "1; mode=block";

What is X-XSS-PROTECTION?

DaRecordon

Well-known member

Kieran2001

Well-known member

VirtuBox

Well-known member

Latest posts New threads

Latest posts

New threads

Latest Hosting Offers New Reviews

Latest hosting offers

Popular Contributors - Past 30 Days

Sponsors

Tag Cloud