Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

The XSS Filter in Internet Explorer 8 improperly blocks HTTP response rendered as XML


Symptoms

When you submit an HTTP request using Internet Explorer (IE) 8 to a target page hosted in a web application, the IE XSS Filter may block the response. This occurs even if the request and response are from the same domain. It also occurs even if you attempt to disable the XSS Filter feature by setting the following HTTP response header on the server: 
X-XSS-Protection: 0

↑ Back to the top


Cause

Microsoft has confirmed that this is a problem in the products listed in the Applies-To section of this article..


↑ Back to the top


Resolution

To workaround the issue, submit the HTTP request to a page that then performs an HTTP 307 redirect to the target page. 

This problem is resolved in Internet Explorer 9. 


↑ Back to the top


Keywords: kb

↑ Back to the top

Article Info
Article ID : 2524198
Revision : 1
Created on : 1/7/2017
Published on : 3/17/2011
Exists online : False
Views : 153