Tuesday, December 8, 2009

Close IE 8 Cross-Site Scripting (XSS) Filter

As aware that we has option to turn-off XSS filter functionality in IE 8 (client side), we also have option to turn-off XSS functionality at Server side by adding under Http Header.

PHP:
header("x-xss-Protection:0");

ASP.net.config:


reference: http://msdn.microsoft.com/zh-cn/library/dd565647(en-us,VS.85).aspx

0 comments: