Remove quotes for XSS Protection Header (minio#5992)

kindofblue · May 30, 2018 · dd0db52 · dd0db52
1 parent a50cc7e
commit dd0db52
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/cmd/generic-handlers.go b/cmd/generic-handlers.go
@@ -661,7 +661,7 @@ func addSecurityHeaders(h http.Handler) http.Handler {
 
 func (s securityHeaderHandler) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 	header := w.Header()
-	header.Set("X-XSS-Protection", "\"1; mode=block\"")              // Prevents against XSS attacks
+	header.Set("X-XSS-Protection", "1; mode=block")                  // Prevents against XSS attacks
 	header.Set("Content-Security-Policy", "block-all-mixed-content") // prevent mixed (HTTP / HTTPS content)
 	s.handler.ServeHTTP(w, r)
 }