Add the X-XSS-Protection response header to the haproxy configuration file.

Procedure

  1. Open /etc/haproxy/conf.d/20-vcac.cfg for editing.
  2. Add the following lines in a front end section: 
    rspdel X-XSS-Protection:\ 1;\ mode=block
          	rspadd X-XSS-Protection:\ 1;\ mode=block
  3. Reload the HAProxy configuration using the following command.

    /etc/init.d/haproxy reload