response.addHeader("X-XSS-Protection", "X-XSS-Protection: 1; mode=block"); 设置后谷歌浏览器出现脚本报错Error parsing header X-XSS-Protection: X-XSS-Protection: 1; mode=block: expected token to be 0 or 1 at character position 0. The default protections will be applied。请问有什么好的解决方案吗?
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8; X-Content-Type-Options=nosniff; X-XSS-Protection: 1;mode=block" />