diff --git a/internal/http/response/builder.go b/internal/http/response/builder.go
index 97c86fce..caf48d0b 100644
--- a/internal/http/response/builder.go
+++ b/internal/http/response/builder.go
@@ -96,7 +96,6 @@ func (b *Builder) Write() {
 }
 
 func (b *Builder) writeHeaders() {
-	b.headers["X-XSS-Protection"] = "1; mode=block"
 	b.headers["X-Content-Type-Options"] = "nosniff"
 	b.headers["X-Frame-Options"] = "DENY"
 	b.headers["Referrer-Policy"] = "no-referrer"
diff --git a/internal/http/response/builder_test.go b/internal/http/response/builder_test.go
index 7b4d73ef..ccc29c8c 100644
--- a/internal/http/response/builder_test.go
+++ b/internal/http/response/builder_test.go
@@ -28,7 +28,6 @@ func TestResponseHasCommonHeaders(t *testing.T) {
 	resp := w.Result()
 
 	headers := map[string]string{
-		"X-XSS-Protection":       "1; mode=block",
 		"X-Content-Type-Options": "nosniff",
 		"X-Frame-Options":        "DENY",
 	}