I have two questions:
How can I make Firefox ignore the
X-XSS-Protectionheader? I have a website which sends an
X-XSS-Protection: 1header and I want my Firefox to ignore that header, because it destroys my reflected XSS tests. I know Chrome has a directive
--disable-xss-auditorto ignore it but I can't find anywhere how to do the same in Firefox.
How to disable XSS protection from web browser itself (Firefox + Chrome). I'm now not saying about header from a server, but how to disable built into web browser protection against reflected XSS?