Question
JPMC
IN
Last activity: 22 Mar 2017 11:52 EDT
logging off user after idle timeout
I am using the custom code mentioned at https://pdn.pega.com/support-articles/pxsessiontimer-logoff-timer-does-not-display-countdown-window
it works good, but in chrome i get an error in console as :
Unrecognized Content-Security-Policy directive 'Value=default-src'.
Error parsing header X-XSS-Protection: mode=block: expected 0 or 1 at character position 0. The default protections will be applied.
Plz help to fix this.
***Updated by Moderator: Marissa to update categories***
Pegasystems Inc.
IN
Hi Ashish,
Thanks for writing to PSC for you query.
Can you please take a look at this PDN Article :
https://community.pega.com/support/support-articles/how-apply-timeout-screen
Hope this helps!
Best,
Gurpreet Kaur
JPMC
IN
Hi,
I donot find any difference in the article you mentioned than the article i was following: https://community.pega.com/support/support-articles/pxsessiontimer-logoff-timer-does-not-display-countdown-window
main issue is i get error in chrome console.
Pegasystems Inc.
US
Hi Ashish,
I had cross checked the syntax of the X-XSS-Protection over here and the syntax of your response header is not matching with the original syntax.
Cross check the X-XSS-Protection header value at your browser developer tools to make sure its value.
Original Syntax:
X-XSS-Protection: 0 X-XSS-Protection: 1 X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; report=<reporting-uri>
But the error syntax represents "X-XSS-Protection: mode=block: expected 0 or 1 at character position 0", so this might the root cause of your issue.
Hi Ashish,
I had cross checked the syntax of the X-XSS-Protection over here and the syntax of your response header is not matching with the original syntax.
Cross check the X-XSS-Protection header value at your browser developer tools to make sure its value.
Original Syntax:
X-XSS-Protection: 0 X-XSS-Protection: 1 X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; report=<reporting-uri>
But the error syntax represents "X-XSS-Protection: mode=block: expected 0 or 1 at character position 0", so this might the root cause of your issue.
You can try to google related to the X-XSS-Protection response header for more information about it. Hope this might be helpful to you in proceeding further.
Regards
Mahesh