https://github.com/pepabo/action_dispatch-disable_x_xss_protection

Disables the X-XSS-Protection header which Action Dispatch sets by default
https://github.com/pepabo/action_dispatch-disable_x_xss_protection

rails

Last synced: about 1 month ago
JSON representation

Disables the X-XSS-Protection header which Action Dispatch sets by default

• Host: GitHub
• URL: https://github.com/pepabo/action_dispatch-disable_x_xss_protection
• Owner: pepabo
• License: mit
• Created: 2020-04-23T08:51:00.000Z (over 4 years ago)
• Default Branch: master
• Last Pushed: 2020-04-24T08:23:39.000Z (over 4 years ago)
• Last Synced: 2024-08-09T15:30:10.934Z (5 months ago)
• Topics: rails
• Language: Ruby
• Homepage:
• Size: 34.2 KB
• Stars: 1
• Watchers: 9
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: MIT-LICENSE

Awesome Lists containing this project

README

        
# ActionDispatch::DisableXXssProtection

[![Build Status](https://github.com/pepabo/action_dispatch-disable_x_xss_protection/workflows/build/badge.svg)](https://github.com/pepabo/action_dispatch-disable_x_xss_protection/actions?workflow=build)

> Disables the X-XSS-Protection header which Action Dispatch sets by default

This gem disables the X-XSS-Protection header which Action Dispatch sets as `1; mode=block` by default. Applications always return `X-XSS-Protection: 0` after installing this gem.

## Usage

All you need is to add this gem to your application's Gemfile:

```ruby

gem 'action_dispatch-disable_x_xss_protection'

```

And then execute:

```bash

$ bundle

```

Assumed that a server has started by `bin/rails s`:

```

# before installing this gem

$ curl -sI http://localhost:3000 | grep X-XSS-Protection

X-XSS-Protection: 1; mode=block

# after installing this gem

$ curl -sI http://localhost:3000 | grep X-XSS-Protection

X-XSS-Protection: 0

```

## Contributing

Bug reports and pull requests are welcome on GitHub at https://github.com/pepabo/action_dispatch-disable_x_xss_protection.

## License

The gem is available as open source under the terms of the [MIT License](https://opensource.org/licenses/MIT).