[nelmio/security-bundle] Remove xss_protection config

This commit is contained in:
Nicolas Grekas
2024-10-08 11:40:06 +02:00
parent d62024a8a5
commit 3779d3a525

View File

@@ -8,12 +8,6 @@ nelmio_security:
content_type: content_type:
nosniff: true nosniff: true
# forces Microsoft's XSS-Protection with
# its block mode
xss_protection:
enabled: true
mode_block: true
# Send a full URL in the `Referer` header when performing a same-origin request, # Send a full URL in the `Referer` header when performing a same-origin request,
# only send the origin of the document to secure destination (HTTPS->HTTPS), # only send the origin of the document to secure destination (HTTPS->HTTPS),
# and send no header to a less secure destination (HTTPS->HTTP). # and send no header to a less secure destination (HTTPS->HTTP).