You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
searxng/docs/admin
Markus Heiser ab8e5383fb [mod] remove X-XSS-Protection headers
Deprecated header not used by browsers nowadays[1]:

"""In modern browsers, X-XSS-Protection has been deprecated in favor of the
Content-Security-Policy to disable the use of inline JavaScript. Its use can
introduce XSS vulnerabilities in otherwise safe websites. This should not be
used unless you need to support older web browsers that don’t yet support CSP.
It is thus recommended to set the header as X-XSS-Protection: 0."""[2]

[1] https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection
[2] https://infosec.mozilla.org/guidelines/web_security#x-xss-protection

Closes: https://github.com/searxng/searxng/issues/3171
Signed-off-by: Markus Heiser <markus.heiser@darmarit.de>
9 months ago
..
answer-captcha [doc] answer CAPTCHA from server's IP 1 year ago
settings [mod] remove X-XSS-Protection headers 9 months ago
answer-captcha.rst [doc] answer CAPTCHA from server's IP 1 year ago
api.rst [mod] settings.yml: remove plugin settings for plugins that don't exist anymore 1 year ago
arch_public.dot [doc] update documentation of the installation procedures 2 years ago
architecture.rst [docs] corrections from @tiekoetter's review 2 years ago
buildhosts.rst [fix] typos in documentation & messages 1 year ago
index.rst [mod] isolation of botdetection from the limiter 12 months ago
installation-apache.rst [fix] spelling 1 year ago
installation-docker.rst Docker: add UWSGI_WORKERS and UWSGI_THREAD environment variables (#2992) 11 months ago
installation-nginx.rst [doc] rearranges Settings & Engines docs for better readability 1 year ago
installation-scripts.rst [fix] typos/grammar in docs 2 years ago
installation-searxng.rst [fix] typos in documentation & messages 1 year ago
installation-uwsgi.rst [doc] rearranges Settings & Engines docs for better readability 1 year ago
installation.rst [fix] typos/grammar in docs 2 years ago
plugins.rst [mod] documentation: change the jinja context doesn't depend on searx.webapp 4 years ago
searx.limiter.rst [mod] isolation of botdetection from the limiter 12 months ago
update-searxng.rst [fix] typos in documentation & messages 1 year ago