X-XSS-Protection: 1; mode=block

The browser will prevent rendering of the page if an attack is detected. Please click on here for reference.

response(ServletRequest).addHeader("X-XSS-Protection", "1; mode=block");