Replace "X-XSS-Protection 0" with "X-XSS-Protection "1; mode=block"

[thalix]

I am running nodebb 1.17.0 with a nginx proxy.

I want to disable or change the header set from nodebb: "X-XSS-Protection 0". It should be "X-XSS-Protection "1; mode=block"

If I just add the header in nginx, I have two headers which in invalid. So, how to remove or change to header within nodebb?

[PitaJ]

Can you try something like this in your nginx config?

proxy_hide_header X-XSS-Protection
add_header X-XSS-Protection "1; mode=block"

[thalix]

@pitaj said in Replace "X-XSS-Protection 0" with "X-XSS-Protection "1; mode=block":

proxy_hide_header X-XSS-Protection

This solved the issue. Thank you.