New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Modify X-XSS-Protection profile to do the oposite #61

Closed

calabacito opened this issue Jun 4, 2020 · 1 comment

calabacito commented Jun 4, 2020

Now it is checking if the flag is present. It should do the oposite, the flag should NOT be used:

OWASP/CheatSheetSeries#376 (comment)

Keep the great work :)

calabacito changed the title ~~Modify X-XSS-Protection to do the oposite~~ Modify X-XSS-Protection profile to do the oposite

Owner

wagiro commented Jun 7, 2020

Hi @calabacito ,

Thanks for the issue. The actual X-XSS-Protection profile, looks if the "X-XSS-Protection: 1;" header it's not present on the response.

Best regards.

wagiro closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment