Page 1 of 1

The X-XSS-Protection header is not defined.

Posted: 07 May 2020, 12:30
by sonik_blast
If after you have checked your website you see this:
The X-XSS-Protection header is not defined.
Go to httpd.conf and add to the bottom

Code: Select all

LoadModule headers_module modules/mod_headers.so
Header set X-XSS-Protection "1; mode=block"
Be shure that Mod_headers is enabled
Restart apache