mirrors/searxng
1
0
Fork 0
mirror of https://github.com/searxng/searxng.git synced 2024-05-18 03:22:39 +00:00
Code Issues Projects Releases Wiki Activity
searxng/tests/unit/settings
History
Markus Heiser ab8e5383fb [mod] remove X-XSS-Protection headers 
Deprecated header not used by browsers nowadays[1]:

"""In modern browsers, X-XSS-Protection has been deprecated in favor of the
Content-Security-Policy to disable the use of inline JavaScript. Its use can
introduce XSS vulnerabilities in otherwise safe websites. This should not be
used unless you need to support older web browsers that don’t yet support CSP.
It is thus recommended to set the header as X-XSS-Protection: 0."""[2]

[1] https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection
[2] https://infosec.mozilla.org/guidelines/web_security#x-xss-protection

Closes: https://github.com/searxng/searxng/issues/3171
Signed-off-by: Markus Heiser <markus.heiser@darmarit.de>
2024-01-31 17:23:41 +01:00
..
empty_settings.yml [enh] settings.yml: add use_default_settings option (2nd version) 2020-11-27 19:40:04 +01:00
syntaxerror_settings.yml [yamllint] tests/unit/settings/syntaxerror_settings.yml 2021-06-05 17:41:24 +02:00
test_settings.yml [fix] make flask_babel.gettext() work in engine modules (L10n & threads) 2023-08-09 13:27:43 +02:00
user_settings.yml [mod] remove X-XSS-Protection headers 2024-01-31 17:23:41 +01:00
user_settings_keep_only.yml [yamllint] tests/unit/settings/user_settings_keep_only.yml 2021-06-05 17:41:24 +02:00
user_settings_remove.yml [yamllint] tests/unit/settings/user_settings_remove.yml 2021-06-05 17:41:24 +02:00
user_settings_remove2.yml [yamllint] tests/unit/settings/user_settings_remove2.yml 2021-06-05 17:41:24 +02:00
user_settings_simple.yml [yamllint] tests/unit/settings/user_settings_simple.yml 2021-06-05 17:41:24 +02:00