Revert "fix: remove X-XSS-Protection header from helmet"

This reverts commit aebb00d.
ladjs · Jan 5, 2024 · da9d607 · da9d607
1 parent 878f7f0
commit da9d607
Showing 1 changed file with 0 additions and 6 deletions.
diff --git a/index.js b/index.js
@@ -259,12 +259,6 @@ class Web {
     // (needs to come before i18n so HSTS header gets added)
     if (this.config.helmet) app.use(helmet(this.config.helmet));
 
-    // remove X-XSS-Protection header from Helmet
-    app.use((ctx, next) => {
-      ctx.remove('X-XSS-Protection');
-      return next();
-    });
-
     // i18n
     if (this.config.i18n) {
       // create new @ladjs/i18n instance