trezy/next-safe

docs/api/xssProtection.md

Summary

Maintainability

Test Coverage

Issues

## `xssProtection`

### Default

`1; mode=block`

### Description

`xssProtection` controls the value of the `X-XSS-Protection` header. This header is mostly for backwards compatibility. It enables some security features in older browsers that dobn't support CSP.

Set to `false` to disable the `X-XSS-Protection` header.