And as for IE 8 and 9 (which are also remains popular) there is need to use [X-XSS-Protection](http://blogs.msdn.com/b/ieinternals/archive/2011/01/31/controlling-the-internet-explorer-xss-filter-with-the-x-xss-protection-http-header.aspx) header instead.