By default, Horizon 8 employs the XSS (cross-site scripting) Filter feature to mitigate cross-site scripting attacks by sending the header x-xss-protection=1; mode=block in its HTTP responses.
You can deactivate this feature by adding the following entry to the file locked.properties:
x-xss-protection=OFF
Was this page helpful?