xssProtection property

String? xssProtection

X-XSS-Protection. 0 turns the old XSS filter of browsers off, like OWASP says. The filter is gone from new browsers, and in old ones it can make holes. Use contentSecurityPolicy instead.

Implementation

final String? xssProtection;