From 95511b033054fbbc32c487dbfb6ac5d90b9282e6 Mon Sep 17 00:00:00 2001
From: Raphael Michel <michel@rami.io>
Date: Sat, 29 Jun 2024 19:22:37 +0200
Subject: [PATCH] Remove X-XSS-Protection, no longer supported by any browser

---
 src/pretix/base/middleware.py | 2 --
 1 file changed, 2 deletions(-)

diff --git a/src/pretix/base/middleware.py b/src/pretix/base/middleware.py
index dbca8e7ba2..82132665cf 100644
--- a/src/pretix/base/middleware.py
+++ b/src/pretix/base/middleware.py
@@ -256,8 +256,6 @@ class SecurityMiddleware(MiddlewareMixin):
             # pages
             return resp
 
-        resp['X-XSS-Protection'] = '1'
-
         # We just need to have a P3P, not matter whats in there
         # https://blogs.msdn.microsoft.com/ieinternals/2013/09/17/a-quick-look-at-p3p/
         # https://github.com/pretix/pretix/issues/765