The X-XSS-Protection Security Header Won’t Provide Protection Against XSS Attacks on Your WordPress Website
Last week, we looked at so-called Advanced XSS Protection offered by a 1+ million install WordPress plugin, which turned out to not provide protection, advanced or otherwise. That involved, in part, the security header X-XSS-Protection, which it seems worth going Continue reading The X-XSS-Protection Security Header Won’t Provide Protection Against XSS Attacks on Your WordPress Website