* 歴史

** IE8

[REFS[
- [5] [CITE@en[IE8 Security Part IV: The XSS Filter - IEBlog - Site Home - MSDN Blogs]] ([TIME[2012-11-18 01:16:09 +09:00]] 版) <http://blogs.msdn.com/b/ie/archive/2008/07/01/ie8-security-part-iv-the-xss-filter.aspx>
- [1] [CITE@en[IEBlog : IE8 Security Part IV: The XSS Filter]] ([TIME[2008-12-06 00:29:42 +09:00]] 版) <http://blogs.msdn.com/ie/archive/2008/07/02/ie8-security-part-iv-the-xss-filter.aspx>
- [2] [CITE@en[IE8 Security Part IV: The XSS Filter - IEBlog - Site Home - MSDN Blogs]]
([TIME[2010-10-27 15:18:13 +09:00]] 版)
<http://blogs.msdn.com/b/ie/archive/2008/07/02/ie8-security-part-iv-the-xss-filter.aspx>
- [6] [CITE@en[Controlling the XSS Filter - IEInternals - Site Home - MSDN Blogs]] ([TIME[2012-11-18 01:43:55 +09:00]] 版) <http://blogs.msdn.com/b/ieinternals/archive/2011/01/31/controlling-the-internet-explorer-xss-filter-with-the-x-xss-protection-http-header.aspx>
- [3] [CITE[IE8 XSS Filterの仕様が微妙に変更されていた。 - 葉っぱ日記]]
([TIME[2010-10-08 10:25:32 +09:00]] 版)
<http://d.hatena.ne.jp/hasegawayosuke/20101004/p1>
- [4] [CITE[IRC logs: freenode / #whatwg / 20110329]]
( ([TIME[2011-04-10 20:06:55 +09:00]] 版))
<http://krijnhoetmer.nl/irc-logs/whatwg/20110329#l-828>
]REFS]

* 例

[FIG[
[7] 
[PRE(HTTP example code)[
X-XSS-Protection: 1
]PRE]
]FIG]

[FIG[
[8] 
[PRE(HTTP example code)[
X-XSS-Protection: 0
]PRE]
]FIG]

[FIG[
[9] 
[PRE(HTTP example code)[
X-XSS-Protection: 1; mode=block
]PRE]
]FIG]

[10] [CITE[Chromium Blog: Security in Depth: New Security Features]]
( ([TIME[2012-11-17 12:03:40 +09:00]] 版))
<http://blog.chromium.org/2010/01/security-in-depth-new-security-features.html>

[11] [CITE[Bug 100892 – Support X-XSS-Protection: report=URL header syntax in XSSAuditor.]]
( ([TIME[2012-11-18 01:52:05 +09:00]] 版))
<https://bugs.webkit.org/show_bug.cgi?id=100892>

[12] [CITE[XSSフィルタの誤検出とその対策について - 金利0無利息キャッシング – キャッシングできます - subtech]]
( ([TIME[2012-11-18 01:59:02 +09:00]] 版))
<http://subtech.g.hatena.ne.jp/mala/20110423/1303536971>

[13] [CITE[Masato Kinugawa Security Blog: ブラウザのXSS保護機能をバイパスする(4)]]
( ([TIME[2014-12-10 22:38:07 +09:00]] 版))
<http://masatokinugawa.l0.cm/2014/09/xss4.html>

[14] [CITE[iframeがChromiumのXSS Filterに引っかかる - ぷちてく - Petittech]]
( ([TIME[2017-05-29 01:17:10 +09:00]]))
<https://ptech.g.hatena.ne.jp/noromanba/20170405/1491345491>

[15] [CITE@en[702542 - False positives with ERR_BLOCKED_BY_XSS_AUDITOR - chromium - Monorail]]
( ([TIME[2017-05-29 01:19:12 +09:00]]))
<https://bugs.chromium.org/p/chromium/issues/detail?id=702542>

[FIG(quote)[
[FIGCAPTION[
[16] [CITE@ja[Facebook - ログインまたは登録]]
([TIME[2018-04-14 20:00:34 +09:00]])
<https://www.facebook.com/>
]FIGCAPTION]

> x-xss-protection:0

]FIG]


[FIG(quote)[
[FIGCAPTION[
[17] [CITE@ja[「いま」を見つけよう]]
([TIME[2018-04-14 20:05:25 +09:00]])
<https://twitter.com/>
]FIGCAPTION]

> x-xss-protection: 1; mode=block; report=https://twitter.com/i/xss_report
> 

]FIG]