Changes between Initial Version and Version 1 of Ticket #12964, comment 9
- Timestamp:
- Apr 23, 2018, 5:39:34 PM (6 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
Ticket #12964, comment 9
initial v1 7 7 * We could only append `'X-XSS-Protection', 0` only if it's not conflicting. However, that would cause the #12926 issue to be seen for some user-configurable headers. 8 8 9 Do we also have a conflict in case the user specifies `X-XSS-Protection` through web server, like with `mod_headers` on Apache? 9 Do we also have a conflict in case the user specifies `X-XSS-Protection` through web server, like with `mod_headers` on Apache? It might be necessary to use the [http://httpd.apache.org/docs/current/mod/mod_headers.html#header setifempty argument].
