Can you please specify how this could be done? I tried adding this to my template but it does not modify showpic... config.additionalHeaders = X-XSS-Protection: 0 Thanks. > It helps to change showpic so that is sends a: > > > X-XSS-Protection: 0 > > header, because that switches IE8 XSS Protection off for this page.