From 2cd559b87a66a252ee7bccf270b1d88282efaed2 Mon Sep 17 00:00:00 2001
From: Emilien Mantel <emilien.mantel@debianiste.org>
Date: Thu, 9 Feb 2017 11:59:33 +0100
Subject: [PATCH] Fix X-XSS-Protection with quotes

---
 vars/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/vars/main.yml b/vars/main.yml
index a8587d3..f7a8966 100644
--- a/vars/main.yml
+++ b/vars/main.yml
@@ -42,7 +42,7 @@ nginx_templates_no_dir:
 nginx_servers_default_headers:
   'X-Frame-Options': 'DENY always'
   'X-Content-Type-Options': 'nosniff always'
-  'X-XSS-Protection': '1; mode=block'
+  'X-XSS-Protection': '"1; mode=block"'
 
 nginx_upstream_php56: 'php56'
 nginx_upstream_php70: 'php70'