Response Headers Policy Xss Protection Args
Properties
A Boolean that determines whether CloudFront includes the mode=block
directive in the X-XSS-Protection
header. For more information about this directive, see X-XSS-Protection in the MDN Web Docs.
A Boolean that determines the value of the X-XSS-Protection
HTTP response header. When this setting is true
, the value of the X-XSS-Protection
header is 1
. When this setting is false
, the value of the X-XSS-Protection
header is 0
. For more information about these settings, see X-XSS-Protection in the MDN Web Docs.
A reporting URI, which CloudFront uses as the value of the report
directive in the X-XSS-Protection
header. You cannot specify a ReportUri
when ModeBlock
is true
. For more information about using a reporting URL, see X-XSS-Protection in the MDN Web Docs.