HTTPServer: Fix X-XSS-Protection header formatting (#17620)

Fixes #17619
6 years ago · ed613194ac
parent 64841fe417
commit ed613194ac
1 changed files with 1 additions and 2 deletions
--- a/pkg/middleware/middleware.go
+++ b/pkg/middleware/middleware.go
@ -270,8 +270,7 @@ func AddSecurityHeaders(w macaron.ResponseWriter) {
 	}

 	if setting.XSSProtectionHeader {
-		w.Header().Add("X-XSS-Protection", "1")
-		w.Header().Add("X-XSS-Protection", "mode=block")
+		w.Header().Add("X-XSS-Protection", "1; mode=block")
 	}
 }