Skip to content

Commit 7f87872

Browse files
docs(admin): grammar/wording
Co-authored-by: Joas Schilling <[email protected]> Signed-off-by: MichaIng <[email protected]>
1 parent 74dbee7 commit 7f87872

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

admin_manual/release_notes/upgrade_to_32.rst

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,5 +12,5 @@ Web server configuration
1212
------------------------
1313

1414
* Setup checks do not check for the ``X-XSS-Protection`` response header anymore. It has been removed from Nextcloud's ``.htaccess`` and you may want to adjust your webserver config to not serve it anymore.
15-
XSS filtering was supported only until Chromium 78 and similarly old browsers, but had been found to cause more issues, including attack vectors, than it solves.
15+
XSS filtering was supported only until Chromium 78 and similarly old browsers, but had been found to cause more issues, including attack vectors, than it solved.
1616
Nowadays, aside of not serving the header at all, the only generally recommended value is ``0``. More context can be found in the `OWASP Cheat Sheet Series <https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html#x-xss-protection>`_.

0 commit comments

Comments
 (0)