HTTPServer: Fix X-XSS-Protection header formatting (#17620)

Fixes #17619 (cherry picked from commit ed613194ac)
2019-06-18 11:39:19 +01:00
parent 8a30e47aa4
commit 3232ea4552
1 changed files with 1 additions and 2 deletions
@@ -266,8 +266,7 @@ func AddSecurityHeaders(w macaron.ResponseWriter) {
 	}

 	if setting.XSSProtectionHeader {
-		w.Header().Add("X-XSS-Protection", "1")
-		w.Header().Add("X-XSS-Protection", "mode=block")
+		w.Header().Add("X-XSS-Protection", "1; mode=block")
 	}
 }