cross site scripting

Cross-Site Scripting (XSS) Attack web security vulnerability that allows an attacker to inject client-side scripts into web pages viewed by other users. This enables attackers to bypass access controls and potentially steal sensitive information, take control of user sessions, or perform malicious actions.

X-XSS-Protection: 0 : disable xxs filtering allowing potentially malicious scripts to execute.
_