9253d894d3
@see https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-XSS-Protection#security_considerations Signed-off-by: snipe <snipe@snipe.net>