[Webkit-unassigned] [Bug 27312] [XSSAuditor] Add support for header X-XSS-Protection

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Jan 27 23:51:29 PST 2010


https://bugs.webkit.org/show_bug.cgi?id=27312





--- Comment #12 from Adam Barth <abarth at webkit.org>  2010-01-27 23:51:29 PST ---
> Also, what are your thoughts about using own header for now?
> X-XSS-Auditor-Options?

I'd prefer to use the same header if at all possible.  I've been told that we
can use the value 12 to trigger a full-page block.  Why 12?  That's a question
for the ages.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list