Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
reflected-xss missing #3118
Chrome introduced it, but it never made the CSP2 spec.
Therefore the answer to Can I use "reflected-xss" is "no, use X-XSS-Protection" instead.