Use Helmet's new default for x-xss-protection

mozilla · Sep 17, 2020 · 5a2b15e · 5a2b15e
1 parent 473dd39
commit 5a2b15e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/server/index.spec.tsx b/src/server/index.spec.tsx
@@ -185,7 +185,7 @@ describe(__filename, () => {
         );
         expect(response.header['x-content-type-options']).toEqual('nosniff');
         expect(response.header['x-frame-options']).toEqual('DENY');
-        expect(response.header['x-xss-protection']).toEqual('1; mode=block');
+        expect(response.header['x-xss-protection']).toEqual('0');
 
         const staticResponse = await server.get('/favicon.ico');