From 77bcd10729903a970853488a11ddf02bbbe5f69b Mon Sep 17 00:00:00 2001 From: Michael Kaufmann Date: Wed, 25 Oct 2023 15:03:57 +0200 Subject: [PATCH] removed deprecated/old x-xss-protection http-header Signed-off-by: Michael Kaufmann --- lib/Froxlor/UI/Panel/UI.php | 2 -- 1 file changed, 2 deletions(-) diff --git a/lib/Froxlor/UI/Panel/UI.php b/lib/Froxlor/UI/Panel/UI.php index 97e200281d..ea0e648b10 100644 --- a/lib/Froxlor/UI/Panel/UI.php +++ b/lib/Froxlor/UI/Panel/UI.php @@ -142,8 +142,6 @@ public static function sendHeaders() header("X-Content-Security-Policy: " . $csp_content); header("X-WebKit-CSP: " . $csp_content); - header("X-XSS-Protection: 1; mode=block"); - // Don't allow to load Froxlor in an iframe to prevent i.e. clickjacking header("X-Frame-Options: DENY");