Get a demo
Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

Disabled X-XSS-Protection Header

Severity: Information
Summary#

Invicti detected a disabled X-XSS-Protection header which means that this website could be at risk of a Cross-site Scripting (XSS) attacks.

Internet Explorer's built-in cross-site scripting protection can be disabled by using the following HTTP Header : X-XSS-Protection: 0

Impact#
This issue is reported as additional information only. There is no direct impact arising from this issue.
Remediation#
Add the X-XSS-Protection header with a value of "1; mode= block". 
  • X-XSS-Protection: 1; mode=block
Classifications#
, ,
Invicti Security Insights

Select Category

OR

Search Vulnerability

Related Vulnerabilities

Invicti

Dead accurate, fast & easy-to-use Web Application Security Scanner

Get a demo