diff --git a/web/nginx/config/security.conf b/web/nginx/config/security.conf
index 28464e43..b6a1412a 100644
--- a/web/nginx/config/security.conf
+++ b/web/nginx/config/security.conf
@@ -1,5 +1,4 @@
 # security headers
-add_header X-XSS-Protection             "1; mode=block" always;
 add_header X-Content-Type-Options       "nosniff" always;
 add_header Referrer-Policy              "no-referrer-when-downgrade" always;
 add_header Permissions-Policy           "interest-cohort=()" always;