Incorrect http header found

Hello Tildeslash,
a curl request to Monit 5.34.0 find an incorrect header and ended with an error message.
curl: (8) Header without colon

I checked processor.c and the header should modified from
X-XSS-Protection 1; mode=block
to
X-XSS-Protection: 1; mode=block

See processor.c, occurred two time (I think):

"X-Content-Type-Options: nosniff\r\n"
"X-Frame-Options: SAMEORIGIN\r\n"
"Content-Security-Policy: frame-ancestors 'self'\r\n")
"X-XSS-Protection 1; mode=block\r\n"    << colon is missed
"Referrer-Policy: same-origin\r\n"
"Permissions-Policy: geolocation=(),camera=(),microphone=()\r\n"

Have a nice week,
Lutz

p.s.
See also
3e68e79 add XSS protection for older browsers

Comments (5)