fix(cloud-function): remove deprecated X-XSS-Protection header (#9240)

mdn · Jul 17, 2023 · 4a02f2e · 4a02f2e
1 parent f67677d
commit 4a02f2e
Showing 1 changed file with 0 additions and 2 deletions.
diff --git a/cloud-function/src/headers.ts b/cloud-function/src/headers.ts
@@ -86,7 +86,6 @@ export function setContentResponseHeaders(
   { csp = true, xFrame = true }: { csp?: boolean; xFrame?: boolean }
 ): void {
   [
-    ["X-XSS-Protection", "1; mode=block"],
     ["X-Content-Type-Options", "nosniff"],
     ["Strict-Transport-Security", "max-age=63072000"],
     ...(csp ? [["Content-Security-Policy", CSP_VALUE]] : []),
@@ -100,7 +99,6 @@ export function withRunnerResponseHeaders(
   res: ServerResponse<IncomingMessage>
 ): void {
   [
-    ["X-XSS-Protection", "1; mode=block"],
     ["X-Content-Type-Options", "nosniff"],
     ["Clear-Site-Data", '"*"'],
     ["Strict-Transport-Security", "max-age=63072000"],