A recent security scan of our Lansweeper server detected a Cross-site Scripting Attack vulnerability. Checking Lansweeper knowledge base I found this in a security related document:
X-XSS-Protection: When set to 1, this setting enables the browser's XSS filter, providing an additional layer of defense against cross-site scripting attacks. This setting cannot be altered.
I made this change for LS site in IIS (I am not sure why it says his setting cannot be altered), but the scan still returns the same alert. Has anyone seen this before and if so, have you been able to resolve the issue?
