• caglararli@hotmail.com
  • 05386281520

How to make Firefox ignore the X-XSS-Protection response header?

Çağlar Arlı      -    8 Views

How to make Firefox ignore the X-XSS-Protection response header?

I have two questions:

  1. How can I make Firefox ignore the X-XSS-Protection header? I have a website which sends an X-XSS-Protection: 1 header and I want my Firefox to ignore that header, because it destroys my reflected XSS tests. I know Chrome has a directive --disable-xss-auditor to ignore it but I can't find anywhere how to do the same in Firefox.

  2. How to disable XSS protection from web browser itself (Firefox + Chrome). I'm now not saying about header from a server, but how to disable built into web browser protection against reflected XSS?