XSS-Vulnerability/EN/Solution Tips

If it was reported, that your website is probably not sufficiently protected from XSS attacks:

1; mode=block

Code example of an .htaccess file on an Apache webserver.

  # Turn on XSS prevention tools, activated by default in IE and Chrome
  Header set X-XSS-Protection "1; mode=block"

Here is an example of an .htaccess file which will set the Header Scanner to green. (.htaccess example)