Set X-XSS-Protection "1; mode=block" just for IE8, IE9
Markup