diff --git a/lib/Controller.php b/lib/Controller.php
index cef82a61..4672c3c2 100644
--- a/lib/Controller.php
+++ b/lib/Controller.php
@@ -416,7 +416,6 @@ class Controller
         header('Referrer-Policy: no-referrer');
         header('X-Content-Type-Options: nosniff');
         header('X-Frame-Options: deny');
-        header('X-XSS-Protection: 1; mode=block');
 
         // label all the expiration options
         $expire = array();