Merge pull request #1344 from symfony/nelmio-xss

[nelmio/security-bundle] Remove xss_protection config
symfony · Oct 8, 2024 · 74769e1 · 74769e1
2 parents d62024a + 3779d3a
commit 74769e1
Showing 1 changed file with 0 additions and 6 deletions.
diff --git a/nelmio/security-bundle/2.4/config/packages/nelmio_security.yaml b/nelmio/security-bundle/2.4/config/packages/nelmio_security.yaml
@@ -8,12 +8,6 @@ nelmio_security:
     content_type:
         nosniff: true
 
-    # forces Microsoft's XSS-Protection with
-    # its block mode
-    xss_protection:
-        enabled: true
-        mode_block: true
-
     # Send a full URL in the `Referer` header when performing a same-origin request,
     # only send the origin of the document to secure destination (HTTPS->HTTPS),
     # and send no header to a less secure destination (HTTPS->HTTP).