Cross site scripting error in chrome

This support ticket is created hace 5 años, 12 meses. There's a good chance that you are reading advice that it now obsolete.

This is the technical support forum for Toolset - a suite of plugins for developing WordPress sites without writing PHP.

Everyone can read this forum, but only Toolset clients can post in it. Toolset support works 6 days per week, 19 hours per day.

Sun	Mon	Tue	Wed	Thu	Fri	Sat
-	9:00 – 13:00	9:00 – 13:00	9:00 – 13:00	9:00 – 13:00	9:00 – 13:00	-
-	14:00 – 18:00	14:00 – 18:00	14:00 – 18:00	14:00 – 18:00	14:00 – 18:00	-

Supporter timezone: Asia/Karachi (GMT+05:00)

Etiquetado: Views plugin

Este tema contiene 1 respuesta, tiene 2 mensajes.

Última actualización por Waqar hace 5 años, 11 meses.

Asistido por: Waqar.

Autor

Mensajes

Enero 26, 2019 at 9:37 am #1191426

Akhil

Hi, I realize I have this error in my console.

Error in chrome :
Error parsing header X-XSS-Protection: 1; mode=block, 1; mode=block: expected semicolon at character position 13. The default protections will be applied.

I am using webarx. link:enlace oculto

any idea how to solve this error?

is this cause the usage of <script> </script> ?

Enero 28, 2019 at 5:48 am #1191769

Waqar

Hi Dee,

Thanks for asking! I'd be happy to help.

Although this question isn't directly related to Toolset plugins, I'll be happy to point in the right direction.

If you'll check the headers returned by your website, you'll find some duplicate entries:
enlace oculto

Following are some useful links on the topic:
https://stackoverflow.com/questions/36329776/why-this-error-in-dev-console-of-chrome-when-using-x-xss-protection
enlace oculto

There ara a number of ways to include headers (as explained in the article above) and you can make sure that the website is not adding the same header entries, using multiple methods.

Note: For general questions related to WordPress usage and security, you can start a new thread at specialized WordPress forums:

https://wordpress.org/support/
https://wordpress.stackexchange.com/

I hope this helps.

regards,
Waqar