Title: Security
Last modified: December 27, 2019

---

# Security

 *  [Alex](https://wordpress.org/support/users/expofield/)
 * (@expofield)
 * [6 years, 4 months ago](https://wordpress.org/support/topic/security-89/)
 * Hello, guys!
    I want to ask is this code okay for a header?
 * <system.webServer>
 *  <httpProtocol>
 *  <customHeaders>
 *  <add name=”X-XSS-Protection” value=”1; mode=block” />
 *  </customHeaders>
 *  <add name=Header set X-XSS-Protection “1; mode=block” />
 *  <customHeaders>
 *  </httpProtocol>
 * </system.webServer>
 * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fsecurity-89%2F%3Foutput_format%3Dmd&locale=en_US)
   to see the link]_

Viewing 3 replies - 1 through 3 (of 3 total)

 *  Moderator [Steven Stern (sterndata)](https://wordpress.org/support/users/sterndata/)
 * (@sterndata)
 * Volunteer Forum Moderator
 * [6 years, 4 months ago](https://wordpress.org/support/topic/security-89/#post-12274492)
 * I don’t understand what you’re asking. Please explain the context of your question.
 *  Thread Starter [Alex](https://wordpress.org/support/users/expofield/)
 * (@expofield)
 * [6 years, 4 months ago](https://wordpress.org/support/topic/security-89/#post-12274617)
 * I need to put X-XSS-Protection” value=”1; mode=block / Header set X-XSS-Protection“
   1; mode=block in the headers. I need a code to do it without showing in the header
   of the theme. I found that code on the internet. There were some points (…) after
   the first and before the last </system.webServer> , but they appeared in the 
   theme, so I removed them. Could you please tell me if my code is properly written
   and if not, how it should look. Again, I say, I want it in the headers codes.
   Thank you indeed! I appriciate your help.
 *  Moderator [Steven Stern (sterndata)](https://wordpress.org/support/users/sterndata/)
 * (@sterndata)
 * Volunteer Forum Moderator
 * [6 years, 4 months ago](https://wordpress.org/support/topic/security-89/#post-12274750)
 * None of that belongs in the header of your site. They appear to be lines to be
   added to your web server config files.
 * Use a plugin to modify your WP output: [https://wordpress.org/plugins/search/headers+xss/](https://wordpress.org/plugins/search/headers+xss/)

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Security’ is closed to new replies.

## Tags

 * [code](https://wordpress.org/support/topic-tag/code/)
 * [Coding](https://wordpress.org/support/topic-tag/coding/)
 * [header](https://wordpress.org/support/topic-tag/header/)
 * [protection](https://wordpress.org/support/topic-tag/protection/)

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 3 replies
 * 2 participants
 * Last reply from: [Steven Stern (sterndata)](https://wordpress.org/support/users/sterndata/)
 * Last activity: [6 years, 4 months ago](https://wordpress.org/support/topic/security-89/#post-12274750)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics