Merge pull request #7491 from kaltura/Naos-14.4.0-kmcng-1926

add xss header to kmcng
kaltura · Aug 5, 2018 · bb2a222 · bb2a222
2 parents 94f68b2 + 5534bbb
commit bb2a222
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/alpha/apps/kaltura/modules/kmcng/actions/kmcngAction.class.php b/alpha/apps/kaltura/modules/kmcng/actions/kmcngAction.class.php
@@ -33,6 +33,8 @@ public function execute()
 			header("Strict-Transport-Security: max-age=63072000; includeSubdomains; preload");
 		}
 
+		header("X-XSS-Protection: 1; mode=block");
+
 		//disable cache
 		header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0");
 		header("Cache-Control: post-check=0, pre-check=0", false);