Bug 680771 - Send X-XSS-Protection header for XSS prevention/blocking

[r=mkanat a=LpSolit]

Bug 680771 - Send X-XSS-Protection header for XSS prevention/blocking
92308c08 · Reed Loden · 2e197568 · 92308c08
Commit 92308c08 authored Nov 21, 2011 by Reed Loden
Hide whitespace changes
Inline Side-by-side

Showing with 4 additions and 0 deletions

CGI.pm Bugzilla/CGI.pm +4 -0

No files found.
--- a/Bugzilla/CGI.pm
+++ b/Bugzilla/CGI.pm
@@ -306,6 +306,10 @@ sub header {
        unshift(@_, '-x_frame_options' => 'SAMEORIGIN');
    }

+    # Add X-XSS-Protection header to prevent simple XSS attacks
+    # and enforce the blocking (rather than the rewriting) mode.
+    unshift(@_, '-x_xss_protection' => '1; mode=block');
+
    return $self->SUPER::header(@_) || "";
 }