Many vulnerability scanners will raise false positives regarding outdated installations of OpenSSH on Ubuntu
We see a lot of confusion regarding the X-XSS-Protection header and thought it might be worthwhile to go over exactly what this header is and what it isn’t.