How to change X-XSS-Protection header to 1? Supposedly, xxsFilter is supposed to set this value to 1 when true, but it doesn't
My Code:
// Helmet - Protection
await app.register(fastifyHelmet, {
contentSecurityPolicy: {
directives: {
defaultSrc: ["'self'"],
scriptSrc: ["'self'", "'unsafe-inline'"],
styleSrc: ["'self'", "'unsafe-inline'"],
connectSrc: ["'self'"],
imageSrc: ["'self'"],
},
},
xssFilter: true,
});