/AWS1/CL_FNTRSPHEADERSPLYXSS00

Determines whether CloudFront includes the X-XSS-Protection HTTP response header and the header's value.

For more information about the X-XSS-Protection HTTP response header, see X-XSS-Protection in the MDN Web Docs.

CONSTRUCTOR

IMPORTING

Required arguments:

iv_override TYPE /AWS1/FNTBOOLEAN /AWS1/FNTBOOLEAN

A Boolean that determines whether CloudFront overrides the X-XSS-Protection HTTP response header received from the origin with the one specified in this response headers policy.

iv_protection TYPE /AWS1/FNTBOOLEAN /AWS1/FNTBOOLEAN

A Boolean that determines the value of the X-XSS-Protection HTTP response header. When this setting is true, the value of the X-XSS-Protection header is 1. When this setting is false, the value of the X-XSS-Protection header is 0.

For more information about these settings, see X-XSS-Protection in the MDN Web Docs.

Optional arguments:

iv_modeblock TYPE /AWS1/FNTBOOLEAN /AWS1/FNTBOOLEAN

A Boolean that determines whether CloudFront includes the mode=block directive in the X-XSS-Protection header.

For more information about this directive, see X-XSS-Protection in the MDN Web Docs.

iv_reporturi TYPE /AWS1/FNTSTRING /AWS1/FNTSTRING

A reporting URI, which CloudFront uses as the value of the report directive in the X-XSS-Protection header.

You cannot specify a ReportUri when ModeBlock is true.

For more information about using a reporting URL, see X-XSS-Protection in the MDN Web Docs.

---

Queryable Attributes

Override

A Boolean that determines whether CloudFront overrides the X-XSS-Protection HTTP response header received from the origin with the one specified in this response headers policy.

Accessible with the following methods

Method	Description
GET_OVERRIDE()	Getter for OVERRIDE, with configurable default
ASK_OVERRIDE()	Getter for OVERRIDE w/ exceptions if field has no value
HAS_OVERRIDE()	Determine if OVERRIDE has a value

Protection

A Boolean that determines the value of the X-XSS-Protection HTTP response header. When this setting is true, the value of the X-XSS-Protection header is 1. When this setting is false, the value of the X-XSS-Protection header is 0.

For more information about these settings, see X-XSS-Protection in the MDN Web Docs.

Accessible with the following methods

Method	Description
GET_PROTECTION()	Getter for PROTECTION, with configurable default
ASK_PROTECTION()	Getter for PROTECTION w/ exceptions if field has no value
HAS_PROTECTION()	Determine if PROTECTION has a value

ModeBlock

A Boolean that determines whether CloudFront includes the mode=block directive in the X-XSS-Protection header.

For more information about this directive, see X-XSS-Protection in the MDN Web Docs.

Accessible with the following methods

Method	Description
GET_MODEBLOCK()	Getter for MODEBLOCK, with configurable default
ASK_MODEBLOCK()	Getter for MODEBLOCK w/ exceptions if field has no value
HAS_MODEBLOCK()	Determine if MODEBLOCK has a value

ReportUri

A reporting URI, which CloudFront uses as the value of the report directive in the X-XSS-Protection header.

You cannot specify a ReportUri when ModeBlock is true.

For more information about using a reporting URL, see X-XSS-Protection in the MDN Web Docs.

Accessible with the following methods

Method	Description
GET_REPORTURI()	Getter for REPORTURI, with configurable default
ASK_REPORTURI()	Getter for REPORTURI w/ exceptions if field has no value
HAS_REPORTURI()	Determine if REPORTURI has a value