I have enabled XSS protection in server using nginx with below header. But After long research google chrome, IE 10 & above and safari supports that but Firefox doesnt support
add_header X-XSS-Protection: "1; mode=block";
For eg: when i try below url in IE, chrome and safari it blocks
https://xyz.com/test"><img src%3Dx onerror%3Dalert("xss")></
But Firefox executes alert. Please help me to fix for Mozilla FF.