Merge remote-tracking branch 'origin/develop'

app/Helpers/Helper.php

@@ -123,9 +123,9 @@ class Helper
         if (is_numeric($cost)) {
 
             if (Setting::getSettings()->digit_separator=='1.234,56') {
-                return (float) number_format($cost, 2, ',', '.');
+                return number_format($cost, 2, ',', '.');
             }
-            return (float) number_format($cost, 2, '.', ',');
+            return number_format($cost, 2, '.', ',');
         }
         // It's already been parsed.
         return $cost;

app/Http/Middleware/SecurityHeaders.php

@@ -26,7 +26,6 @@ class SecurityHeaders
         $response = $next($request);
 
         $response->headers->set('X-Content-Type-Options', 'nosniff');
-        $response->headers->set('X-XSS-Protection', '1; mode=block');
 
         // Ugh. Feature-Policy is dumb and clumsy and mostly irrelevant for Snipe-IT,
         // since we don't provide any way to IFRAME anything in in the first place.