removed deprecated/old x-xss-protection http-header

Signed-off-by: Michael Kaufmann <[email protected]>
froxlor · Oct 25, 2023 · 77bcd10 · 77bcd10
1 parent 6ee990a
commit 77bcd10
Showing 1 changed file with 0 additions and 2 deletions.
diff --git a/lib/Froxlor/UI/Panel/UI.php b/lib/Froxlor/UI/Panel/UI.php
@@ -142,8 +142,6 @@ public static function sendHeaders()
 		header("X-Content-Security-Policy: " . $csp_content);
 		header("X-WebKit-CSP: " . $csp_content);
 
-		header("X-XSS-Protection: 1; mode=block");
-
 		// Don't allow to load Froxlor in an iframe to prevent i.e. clickjacking
 		header("X-Frame-Options: DENY");