SEC-2099: X-XSS-Protection Header Support

[spring-projects-issues]

Marten Deinum (Migrated from SEC-2099) said:

The OWASP top 10 has XSS high on there list of vulnerabilities it would be nice if Spring Security provided a filter which would wrap the request. Another filter could be used to set the X-XSS-Protection header (IE8+ uses this for added protection).

[spring-projects-issues]

Marten Deinum said:

Created a pull request -> #24

This only adds the X-XSS-Protection header. It does not contain a full-blown XSS solution!