IntenseWebs/grafana
3
0
Fork 0
mirror of https://github.com/grafana/grafana.git synced 2024-12-29 10:21:41 -06:00
Code Issues Packages Projects Releases Wiki Activity

HTTPServer: Fix X-XSS-Protection header formatting (#17620)

Browse Source 
Fixes #17619
This commit is contained in:
Yann Verry 2019-06-17 23:46:35 +02:00 committed by Marcus Efraimsson
parent 64841fe417
commit ed613194ac
1 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
pkg/middleware/middleware.go
View File

@ -270,8 +270,7 @@ func AddSecurityHeaders(w macaron.ResponseWriter) {
}
if setting.XSSProtectionHeader {
w.Header().Add("X-XSS-Protection", "1")
w.Header().Add("X-XSS-Protection", "mode=block")
w.Header().Add("X-XSS-Protection", "1; mode=block")
}
}