remove deprecated X-XSS-Protection header

ansibleguy · Sep 6, 2024 · 2dfe212 · 2dfe212
1 parent 8d959f5
commit 2dfe212
Showing 1 changed file with 0 additions and 1 deletion.
diff --git a/defaults/main/1_main.yml b/defaults/main/1_main.yml
@@ -59,7 +59,6 @@ defaults_apache:
     'X-Frame-Options': 'SAMEORIGIN'
     'X-Content-Type-Options': 'nosniff'
     'X-Permitted-Cross-Domain-Policies': '"none"'
-    'X-XSS-Protection': '"1; mode=block"'
     'Header always edit Set-Cookie ^(.*)$': '$1;HttpOnly;Secure;SameSite=None'
     # 'Header set Permissions-Policy': '"none"'
     # 'Header set Content-Security-Policy': '"default-src https:; font-src https:; img-src https:; script-src https:; style-src https:;"'