jsp 1.2是否支持响应标头“ X-XSS-Protection”？

Question

I am trying to add the header "X-XSS-Protection" to the response object in a jsp.

my code in jsp...

<%
response.addHeader("X-XSS-Protection","1; mode=block"); 
System.out.println("!!!!!!!!!Testing X-XSS "+response.containsHeader("X-XSS-Protection"));
%>

on the console I get the below result.

!!!!!!!!!Testing X-XSS false

Answer 1

这通常意味着响应的一部分已经被写入，因此添加标头为时已晚。