UNPKG

x-xss-protection

Version:

Middleware to disable the X-XSS-Protection header

38 lines (21 loc) 1.22 kB
# Changelog ## 2.0.0 - 2020-08-02 ### Changed - XSS filtering is now disabled by default. See [#230](https://github.com/helmetjs/helmet/issues/230) ### Removed - No longer accepts options. Read ["How to disable blocking with X–XSS–Protection"](https://github.com/helmetjs/helmet/wiki/How-to-disable-blocking-with-X%E2%80%93XSS%E2%80%93Protection) and ["How to enable the `report` directive with X–XSS–Protection"](https://github.com/helmetjs/helmet/wiki/How-to-enable-the-%60report%60-directive-with-X%E2%80%93XSS%E2%80%93Protection) if you need the legacy behavior. - Dropped support for old Node versions. Node 10+ is now required ## 1.3.0 - 2019-09-01 ### Added - Added `mode: null` to disable `mode=block` ### Changed - Minor performance improvements with Internet Explorer <9 detection ## 1.2.0 - 2019-06-15 ### Added - Added TypeScript type definitions. See [#8](https://github.com/helmetjs/x-xss-protection/pull/8) - Created a changelog - Added some additional package metadata ### Changed - Updated documentation - Excluded some files from npm package Changes in versions 1.1.0 and below can be found in [Helmet's changelog](https://github.com/helmetjs/helmet/blob/master/CHANGELOG.md).