[Webkit-unassigned] [Bug 27312] [XSSAuditor] Add support for header X-XSS-Protection
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Wed Jan 27 23:42:54 PST 2010
https://bugs.webkit.org/show_bug.cgi?id=27312
--- Comment #11 from Daniel Bates <dbates at webkit.org> 2010-01-27 23:42:54 PST ---
I'll look into this.
Also, what are your thoughts about using own header for now?
X-XSS-Auditor-Options?
(In reply to comment #10)
> The code looks good. One final question: how does IE8's XSS filter behave if
> you send it:
>
> X-XSS-Protection: full-block
>
> ?
>
> Ideally, that wouldn't disable the IE8 filter so paranoid folks could enable
> our full-block and keep IE8's neutering.
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list