X-XSS-Protection

HTTP response header

X-XSS-Protection enables browser cross-site scripting filter

Header usage statistics

X-XSS-Protection response header information and usage statistics.
Websites using header X-XSS-Protection6,114,130
Percentage of websites that use X-XSS-Protection header10.09%
Total discovered header values2,228
Header uses directivesYes
Header values are unique or randomNo
Most popular in the country United States

X-XSS-Protection directives (4 total)

  • 0
  • 1
  • mode
  • report

X-XSS-Protection Directives

X-XSS-Protection directives value information and usage statistics
DirectiveShareWebsites countUnique Values
189.35%5,463,1823
mode86.46%5,286,46114
010.52%643,2502
report1.77%108,213133

Websites utilizing X-XSS-Protection

List of websites that use X-XSS-Protection header
DomainCountryRankContacts
fonts.googleapis.com United States1
facebook.com United States2
google.com United States3
youtube.com United States6
twitter.com United States7
googletagmanager.com United States8
See full domain list

Common header values

List of top common X-XSS-Protection header values
Header valueValue prevalence
1; mode=block79%
08%
14%
1;mode=block2%
"1; mode=block"1%
0;report=https://cdn.website-start.de/app/reporting/policyviolation/submit1%
1; mode=block;0%
1; mode=block0%
0;report=https://cdn.initial-website.com/app/reporting/policyviolation/submit0%
1; mode-block0%
value=1; mode=block0%
1; mode=block; report=/beacon/csp.php0%
"1; mode=block" always0%
0;report=https://cdn.eu.mywebsite-editor.com/app/reporting/policyviolation/submit0%
0; mode=block0%
1; mode=block; report=/csr.php0%
1;0%
1; mode = block0%
0;0%
1;mod=block0%