title: Refused to execute a script - X-XSS-Protection in safari
body: <p>Helllo,</p>
  
  <p>Recently I got this error in console:</p>
  
  <blockquote>
    <p>The XSS Auditor refused to execute a script in  because its source
    code was found within the request. The auditor was enabled because the
    server did not send an 'X-XSS-Protection' header.</p>
  </blockquote>
  
  <p>I was reading the questions here telling about getting the same response. But I dont think it is my issue. Here is what I got:</p>
  
  <p>Admin panel -> Edit product (example.com/admin/produkty/upravit/10)</p>
  
  <ul>
  <li>text inputs</li>
  <li>textareas + ckeditor</li>
  <li>ckfinder</li>
  </ul>
  
  <p>After submitting the form (form action: example.com/admin/produkty/upravit/10)</p>
  
  <ul>
  <li>I put everything into DB and then do redirect to (example.com/admin/produkty/zobrazit)</li>
  </ul>
  
  <p>I dont see any similarities between the asked questions here.</p>
  
  <p>Whats more I get it only at few products. Some are working OK some are not but there is no  or any other html tags.</p>
  
  <p>Whats even MORE I got it at dev subdomain and it is working ok there. So I am out of ideas....</p>
  
  <p>Just one more test: It is doing only in safari. Working on chrome without problems</p>