Markus Heiser ab8e5383fb [mod] remove X-XSS-Protection headers ... Deprecated header not used by browsers nowadays[1]: """In modern browsers, X-XSS-Protection has been deprecated in favor of the Content-Security-Policy to disable the use of inline JavaScript. Its use can introduce XSS vulnerabilities in otherwise safe websites. This should not be used unless you need to support older web browsers that don’t yet support CSP. It is thus recommended to set the header as X-XSS-Protection: 0."""[2] [1] https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection [2] https://infosec.mozilla.org/guidelines/web_security#x-xss-protection Closes: https://github.com/searxng/searxng/issues/3171 Signed-off-by: Markus Heiser <markus.heiser@darmarit.de>		2024-01-31 17:23:41 +01:00
..
empty_settings.yml	[enh] settings.yml: add use_default_settings option (2nd version)	2020-11-27 19:40:04 +01:00
syntaxerror_settings.yml	[yamllint] tests/unit/settings/syntaxerror_settings.yml	2021-06-05 17:41:24 +02:00
test_settings.yml	[fix] make flask_babel.gettext() work in engine modules (L10n & threads)	2023-08-09 13:27:43 +02:00
user_settings.yml	[mod] remove X-XSS-Protection headers	2024-01-31 17:23:41 +01:00
user_settings_keep_only.yml	[yamllint] tests/unit/settings/user_settings_keep_only.yml	2021-06-05 17:41:24 +02:00
user_settings_remove.yml	[yamllint] tests/unit/settings/user_settings_remove.yml	2021-06-05 17:41:24 +02:00
user_settings_remove2.yml	[yamllint] tests/unit/settings/user_settings_remove2.yml	2021-06-05 17:41:24 +02:00
user_settings_simple.yml	[yamllint] tests/unit/settings/user_settings_simple.yml	2021-06-05 17:41:24 +02:00