reflected-xss missing #3118

Open
SimonWaters opened this Issue Jan 17, 2017 · 0 comments

Comments

Projects
None yet
2 participants
@SimonWaters

reflected-xss

Chrome introduced it, but it never made the CSP2 spec.

Therefore the answer to Can I use "reflected-xss" is "no, use X-XSS-Protection" instead.

https://bugs.chromium.org/p/chromium/issues/detail?id=657737

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment