From da9d6076686eb1e06c00399c1ef6af6e434e5db1 Mon Sep 17 00:00:00 2001 From: titanism <101466223+titanism@users.noreply.github.com> Date: Fri, 5 Jan 2024 05:23:23 -0600 Subject: [PATCH] Revert "fix: remove X-XSS-Protection header from helmet" This reverts commit aebb00db65cf4cb33d42ec48c1b76401095c69f1. --- index.js | 6 ------ 1 file changed, 6 deletions(-) diff --git a/index.js b/index.js index b1998da..48a3f04 100644 --- a/index.js +++ b/index.js @@ -259,12 +259,6 @@ class Web { // (needs to come before i18n so HSTS header gets added) if (this.config.helmet) app.use(helmet(this.config.helmet)); - // remove X-XSS-Protection header from Helmet - app.use((ctx, next) => { - ctx.remove('X-XSS-Protection'); - return next(); - }); - // i18n if (this.config.i18n) { // create new @ladjs/i18n instance