diff --git a/api/src/main/java/edu/cornell/mannlib/vitro/webapp/controller/admin/SparqlQueryController.java b/api/src/main/java/edu/cornell/mannlib/vitro/webapp/controller/admin/SparqlQueryController.java index df1fb7440..6166d1cf9 100644 --- a/api/src/main/java/edu/cornell/mannlib/vitro/webapp/controller/admin/SparqlQueryController.java +++ b/api/src/main/java/edu/cornell/mannlib/vitro/webapp/controller/admin/SparqlQueryController.java @@ -96,6 +96,7 @@ public class SparqlQueryController extends FreemarkerHttpServlet { SimplePermission.USE_SPARQL_QUERY_PAGE.ACTION)) { return; } + resp.addHeader("X-XSS-Protection", "0"); if (req.getParameterMap().containsKey("query")) { respondToQuery(req, resp); } else {