Open mathiasbynens opened 10 years ago
As indicated by the X- prefix, the X-XSS-Protection header is non-standard. The way XSS Auditors work exactly is also not defined anywhere.
X-
X-XSS-Protection
It would be good to have a spec that defines these things.
As indicated by the
X-
prefix, theX-XSS-Protection
header is non-standard. The way XSS Auditors work exactly is also not defined anywhere.It would be good to have a spec that defines these things.