Ponysearch/docs
Markus Heiser ab8e5383fb [mod] remove X-XSS-Protection headers
Deprecated header not used by browsers nowadays[1]:

"""In modern browsers, X-XSS-Protection has been deprecated in favor of the
Content-Security-Policy to disable the use of inline JavaScript. Its use can
introduce XSS vulnerabilities in otherwise safe websites. This should not be
used unless you need to support older web browsers that don’t yet support CSP.
It is thus recommended to set the header as X-XSS-Protection: 0."""[2]

[1] https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection
[2] https://infosec.mozilla.org/guidelines/web_security#x-xss-protection

Closes: https://github.com/searxng/searxng/issues/3171
Signed-off-by: Markus Heiser <markus.heiser@darmarit.de>
2024-01-31 17:23:41 +01:00
..
_themes/searxng [dev-env] upgrade Sphinx-doc 7.2.3 and unpin at v7.1.2 on py3.8 2023-08-27 17:22:45 +02:00
admin [mod] remove X-XSS-Protection headers 2024-01-31 17:23:41 +01:00
build-templates [doc] improve documentation of make targets and ./manage script 2023-08-06 19:37:12 +02:00
dev [mod] presearch: add language & region support 2024-01-15 19:23:26 +01:00
src [mod] isolation of botdetection from the limiter 2023-11-01 06:44:56 +01:00
user [doc] rearranges Settings & Engines docs for better readability 2023-07-01 22:45:19 +02:00
utils [fix] spelling 2023-09-18 16:20:27 +02:00
conf.py [mod] isolation of botdetection from the limiter 2023-11-01 06:44:56 +01:00
index.rst [doc] rearranges Settings & Engines docs for better readability 2023-07-01 22:45:19 +02:00
own-instance.rst [doc] rearranges Settings & Engines docs for better readability 2023-07-01 22:45:19 +02:00