diff --git a/advanced/lighttpd.conf.debian b/advanced/lighttpd.conf.debian
index 21e48d6c..74761303 100644
--- a/advanced/lighttpd.conf.debian
+++ b/advanced/lighttpd.conf.debian
@@ -90,7 +90,7 @@ $HTTP["url"] =~ "^/admin/" {
     setenv.add-response-header = (
         "X-Pi-hole" => "The Pi-hole Web interface is working!",
         "X-Frame-Options" => "DENY",
-        "X-XSS-Protection" => "1; mode=block",
+        "X-XSS-Protection" => "0",
         "X-Content-Type-Options" => "nosniff",
         "Content-Security-Policy" => "default-src 'self' 'unsafe-inline';",
         "X-Permitted-Cross-Domain-Policies" => "none",
diff --git a/advanced/lighttpd.conf.fedora b/advanced/lighttpd.conf.fedora
index 3da62839..7a6a39c5 100644
--- a/advanced/lighttpd.conf.fedora
+++ b/advanced/lighttpd.conf.fedora
@@ -98,7 +98,7 @@ $HTTP["url"] =~ "^/admin/" {
     setenv.add-response-header = (
         "X-Pi-hole" => "The Pi-hole Web interface is working!",
         "X-Frame-Options" => "DENY",
-        "X-XSS-Protection" => "1; mode=block",
+        "X-XSS-Protection" => "0",
         "X-Content-Type-Options" => "nosniff",
         "Content-Security-Policy" => "default-src 'self' 'unsafe-inline';",
         "X-Permitted-Cross-Domain-Policies" => "none",