LPS-40408 Allow X-XSS-Protection to have configurable values, use "X-XSS-Protection: 1" to be backwards compatible
LPS-40408 API for disabling browser XSS Auditor
LPS-40408 Disable browsers XSS Auditor when we send JS using WYSIWYG editors