reflected-xss Chrome introduced it, but it never made the CSP2 spec. Therefore the answer to Can I use "reflected-xss" is "no, use X-XSS-Protection" instead. https://bugs.chromium.org/p/chromium/issues/detail?id=657737
reflected-xss
Chrome introduced it, but it never made the CSP2 spec.
Therefore the answer to Can I use "reflected-xss" is "no, use X-XSS-Protection" instead.
https://bugs.chromium.org/p/chromium/issues/detail?id=657737