“X-XSS-Protection header cannot be recognized” by Mozilla Observatory

  • Resolved ranggie4

    (@ranggie4)


    5 years, 4 months ago

    Even though ‘Add: X-XSS-Protection’ has been enabled, a check on Mozilla Observatory came back with the error: “X-XSS-Protection header cannot be recognized”. However, just want to add that it did come out ok when checked on Security Headers.

    The page I need help with: [log in to see the link]

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Milan Petrovic

    (@gdragon)

    Header ‘X-XSS-Protection’ is deprecated and will be replaced in the future, but for now, most browsers use it. I am not sure why Mozilla Observatory would mark it as an error, but, all headers added by my plugin are current and up to specs. When ‘X-XSS-Protection’ is removed from all browsers, I will remove it from the plugin.

    Even if the header is not recognized by one browser, others use it, and there is no harm in having it anyway.

    Thread Starter ranggie4

    (@ranggie4)

    Ok, thank you for the info.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘“X-XSS-Protection header cannot be recognized” by Mozilla Observatory’ is closed to new replies.