diff --git a/app/Http/Middleware/XssProtectHeader.php b/app/Http/Middleware/XssProtectHeader.php index dd99d2ed4d..45b9806802 100644 --- a/app/Http/Middleware/XssProtectHeader.php +++ b/app/Http/Middleware/XssProtectHeader.php @@ -14,8 +14,9 @@ class XssProtectHeader */ public function handle($request, Closure $next) { + $mode = '1; mode=block'; $response = $next($request); - $response->headers->set('X-XSS-Protection', '1'); + $response->headers->set('X-XSS-Protection', $mode); return $response; } }