Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

X-Xss-Protection header "1; mode=block" differs in Servlet and Reactive #11948

Closed
Kehrlann opened this issue Oct 4, 2022 · 0 comments
Closed

X-Xss-Protection header "1; mode=block" differs in Servlet and Reactive #11948

Kehrlann opened this issue Oct 4, 2022 · 0 comments
Assignees
@jzheaux @Kehrlann
Labels
in: web An issue in web modules (web, webmvc) type: bug A general bug
Milestone
5.8.9

Comments

@Kehrlann
Copy link
Contributor

Kehrlann commented Oct 4, 2022

X-Xss-Protection header, when set to mode=block, is different in Servlet and Reactive stacks:

  • X-Xss-Protection: 1; mode=block in Servlet
  • X-Xss-Protection: 1 ; mode=block in Reactive, with an extra space

Is this something we want to address?

Discovered in issue: gh-9631
@Kehrlann Kehrlann added status: waiting-for-triage An issue we've not yet triaged type: bug A general bug labels Oct 4, 2022
@marcusdacoregio marcusdacoregio added in: web An issue in web modules (web, webmvc) and removed status: waiting-for-triage An issue we've not yet triaged labels Oct 6, 2022
@marcusdacoregio marcusdacoregio added this to the 5.6.8 milestone Oct 6, 2022
@marcusdacoregio marcusdacoregio modified the milestones: 5.6.8, 5.6.9 Oct 17, 2022
@marcusdacoregio marcusdacoregio modified the milestones: 5.6.9, 5.6.10 Oct 31, 2022
@marcusdacoregio marcusdacoregio modified the milestones: 5.6.10, 5.7.7 Dec 16, 2022
@sjohnr sjohnr modified the milestones: 5.7.7, 5.7.8 Feb 21, 2023
@marcusdacoregio marcusdacoregio modified the milestones: 5.7.8, 5.7.9 Apr 17, 2023
@marcusdacoregio marcusdacoregio modified the milestones: 5.7.9, 5.8.5 Jun 17, 2023
@marcusdacoregio marcusdacoregio modified the milestones: 5.8.5, 5.8.6 Jul 17, 2023
@sjohnr sjohnr modified the milestones: 5.8.6, 5.8.7 Aug 19, 2023
@sjohnr sjohnr modified the milestones: 5.8.7, 5.8.8 Sep 18, 2023
@sjohnr sjohnr modified the milestones: 5.8.8, 5.8.9 Oct 13, 2023
@jzheaux jzheaux mentioned this issue Dec 18, 2023
Closed
@jzheaux jzheaux self-assigned this Dec 18, 2023
@jzheaux jzheaux moved this to Done in Spring Security Team Jan 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jzheaux jzheaux

@Kehrlann Kehrlann

Labels
in: web An issue in web modules (web, webmvc) type: bug A general bug
Projects
Spring Security Team
Status: Done
Milestone
5.8.9
Development

No branches or pull requests
4 participants
@jzheaux @sjohnr @Kehrlann @marcusdacoregio