Merge pull request #1825 from mirek-vl/master

Remove X-XSS-Protection from Controller.php

lib/Controller.php

@@ -416,7 +416,6 @@ class Controller
         header('Referrer-Policy: no-referrer');
         header('X-Content-Type-Options: nosniff');
         header('X-Frame-Options: deny');
-        header('X-XSS-Protection: 1; mode=block');
 
         // label all the expiration options
         $expire = array();