ResponseHeadersPolicyXSSProtection
¶
Source code in docs_src/capo_cloudfront/types/response_headers_policy_xss_protection.py
mode_block
instance-attribute
¶
mode_block: NotRequired[boolean]
A Boolean that determines whether CloudFront includes the mode=block directive in the X-XSS-Protection header.
For more information about this directive, see X-XSS-Protection in the MDN Web Docs.
override
instance-attribute
¶
override: boolean
A Boolean that determines whether CloudFront overrides the X-XSS-Protection HTTP response header received from the origin with the one specified in this response headers policy.
protection
instance-attribute
¶
protection: boolean
A Boolean that determines the value of the X-XSS-Protection HTTP response header. When this setting is true, the value of the X-XSS-Protection header is 1. When this setting is false, the value of the X-XSS-Protection header is 0.
For more information about these settings, see X-XSS-Protection in the MDN Web Docs.
report_uri
instance-attribute
¶
report_uri: NotRequired[string]
A reporting URI, which CloudFront uses as the value of the report directive in the X-XSS-Protection header.
You cannot specify a ReportUri when ModeBlock is true.
For more information about using a reporting URL, see X-XSS-Protection in the MDN Web Docs.