It would be nice to mention that the XSS protection header has been sent: X-XSS-Protection: 1; mode=block Especially if it is set to 0 to disable it. Robin -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://attrition.org/pipermail/nikto-discuss/attachments/20140809/fbd48d71/attachment.html>