XSS-Vulnerability/EN/Solution Tips

1; mode=block

Code example of an .htaccess file on an Apache webserver.

--snip

   # Turn on XSS prevention tools, activated by default in IE and Chrome
   '''Header set X-XSS-Protection „1; mode=block“'''

—snap

Here is an example of an .htaccess file which will set the HTTP-Security-Header-Scanner to green. (.htaccess-Beispiel)