AddXssProtectionBlock Method (HeaderConfig)

Add X-XSS-Protection 1; mode=block to all requests. (limited browser support) Enables XSS protections and instructs the user-agent to block the response in the event that script has been inserted from user input, instead of sanitizing.

Syntax

public ISecurityHeadersBuilder AddXssProtectionBlock()

Return Value

SecurityHeadersBuilder.

Remarks

Only limited implementation is in the browsers see Mozzilla for coverage

Example

Block all java that could do harm like postback data.

app.UseSecurityHeadersMiddleware(options =>
            {
            options.AddXssProtectionBlock();
            });

Requirements

Target Platforms: Windows 7, Windows Vista SP1 or later, Windows XP SP3, Windows Server 2008 (Server Core not supported), Windows Server 2008 R2 (Server Core supported with SP1 or later), Windows Server 2003 SP2

Reference

HeaderConfig Class
HeaderConfig Members