LearnBoost/socket.io — pull request #1333 by yujiosaka (2013-10-24 06:10:47+00:00)
Title: http-polling : adding 'X-XSS-Protection : 0;' to headers necessary not o...

Without this fix, the following warning message will appear if security level is set very high in IE:

"Internet Explorer has modified this page to prevent Cross Site Scripting..."

There was a fix to this problem, by adding "X-XSS-Protection" to headers when using jsonp-polling.

https://github.com/ajaxorg/socket.io/commit/62f7335b5eddf0e3b41dc46a5c8d3f17e8324997

However, jsonp-polling uses http-polling also when handling requests, so I needed to add similar fix to http-polling.