歴史

IE8

  • [5] IE8 Security Part IV: The XSS Filter - IEBlog - Site Home - MSDN Blogs ( 版) http://blogs.msdn.com/b/ie/archive/2008/07/01/ie8-security-part-iv-the-xss-filter.aspx
  • [1] IEBlog : IE8 Security Part IV: The XSS Filter ( 版) http://blogs.msdn.com/ie/archive/2008/07/02/ie8-security-part-iv-the-xss-filter.aspx
  • [2] IE8 Security Part IV: The XSS Filter - IEBlog - Site Home - MSDN Blogs ( 版) http://blogs.msdn.com/b/ie/archive/2008/07/02/ie8-security-part-iv-the-xss-filter.aspx
  • [6] Controlling the XSS Filter - IEInternals - Site Home - MSDN Blogs ( 版) http://blogs.msdn.com/b/ieinternals/archive/2011/01/31/controlling-the-internet-explorer-xss-filter-with-the-x-xss-protection-http-header.aspx
  • [3] IE8 XSS Filterの仕様が微妙に変更されていた。 - 葉っぱ日記 ( 版) http://d.hatena.ne.jp/hasegawayosuke/20101004/p1
  • [4] IRC logs: freenode / #whatwg / 20110329 ( ( 版)) http://krijnhoetmer.nl/irc-logs/whatwg/20110329#l-828

例

[7] 

X-XSS-Protection: 1

[8] 

X-XSS-Protection: 0

[9] 

X-XSS-Protection: 1; mode=block

[10] Chromium Blog: Security in Depth: New Security Features ( ( 版)) http://blog.chromium.org/2010/01/security-in-depth-new-security-features.html

[11] Bug 100892 – Support X-XSS-Protection: report=URL header syntax in XSSAuditor. ( ( 版)) https://bugs.webkit.org/show_bug.cgi?id=100892

[12] XSSフィルタの誤検出とその対策について - 金利0無利息キャッシング – キャッシングできます - subtech ( ( 版)) http://subtech.g.hatena.ne.jp/mala/20110423/1303536971

[13] Masato Kinugawa Security Blog: ブラウザのXSS保護機能をバイパスする(4) ( ( 版)) http://masatokinugawa.l0.cm/2014/09/xss4.html

[14] iframeがChromiumのXSS Filterに引っかかる - ぷちてく - Petittech ( ()) https://ptech.g.hatena.ne.jp/noromanba/20170405/1491345491

[15] 702542 - False positives with ERR_BLOCKED_BY_XSS_AUDITOR - chromium - Monorail ( ()) https://bugs.chromium.org/p/chromium/issues/detail?id=702542

[16] Facebook - ログインまたは登録 () https://www.facebook.com/

x-xss-protection:0

[17] 「いま」を見つけよう () https://twitter.com/

x-xss-protection: 1; mode=block; report=https://twitter.com/i/xss_report