Skip to content

Instantly share code, notes, and snippets.

@liuxd

liuxd/XSS Auditor.md

Created August 28, 2017 22:43
Show Gist options
  • Save liuxd/ba69a1f56b888b96e5bf226bf3b48181 to your computer and use it in GitHub Desktop.
Save liuxd/ba69a1f56b888b96e5bf226bf3b48181 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
XSS Auditor.md

Console

The XSS Auditor refused to execute a script in 'http://XXXXX' because its source code was found within the request. The auditor was enabled as the server sent neither an 'X-XSS-Protection' nor 'Content-Security-Policy' header.

Explaination

That is a browser feather in secure to prevent XSS.If you wanna skip it,give a head like this from server side:

header("X-XSS-Protection: 0");
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment