Merge pull request #1344 from symfony/nelmio-xss

[nelmio/security-bundle] Remove xss_protection config
This commit is contained in:
Fabien Potencier
2024-10-08 12:11:54 +02:00
committed by GitHub
@@ -8,12 +8,6 @@ nelmio_security:
content_type:
nosniff: true
# forces Microsoft's XSS-Protection with
# its block mode
xss_protection:
enabled: true
mode_block: true
# Send a full URL in the `Referer` header when performing a same-origin request,
# only send the origin of the document to secure destination (HTTPS->HTTPS),
# and send no header to a less secure destination (HTTPS->HTTP).