XSS-Vulnerability/EN/Solution Tips: Unterschied zwischen den Versionen
(Die Seite wurde neu angelegt: „1; mode=block '''Code example of an .htaccess file on an Apache webserver.''' '''--snip'''<br><pre> # Turn on XSS prevention tools, activated by defa…“) |
|||
Zeile 5: | Zeile 5: | ||
'''--snip'''<br><pre> | '''--snip'''<br><pre> | ||
# Turn on XSS prevention tools, activated by default in IE and Chrome | # Turn on XSS prevention tools, activated by default in IE and Chrome | ||
− | '''Header set X-XSS-Protection | + | '''Header set X-XSS-Protection "1; mode=block"''' |
</pre> | </pre> | ||
'''—snap''' | '''—snap''' |
Version vom 17. Januar 2019, 15:33 Uhr
1; mode=block
Code example of an .htaccess file on an Apache webserver.
--snip
# Turn on XSS prevention tools, activated by default in IE and Chrome '''Header set X-XSS-Protection "1; mode=block"'''
—snap
Here is an example of an .htaccess file which will set the HTTP-Security-Header-Scanner to green. (.htaccess-Beispiel)