When you submit an HTTP request using Internet Explorer (IE) 8 to a target page hosted in a web application, the IE XSS Filter may block the response. This occurs even if the request and response are from the same domain. It also occurs even if you attempt to disable the XSS Filter feature by setting the following HTTP response header on the server:
X-XSS-Protection: 0