title: Cpanel xss blocking payment notification payfast
body: <p>I'm getting the following error when trying to submit a notification from payfast to my server in order to get my server to do stuff:
  <code>HTTP/1.1 500 Internal Server Error Server: nginx Date: Sun, 17 Jul 2022 13:53:14 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: keep-alive X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff</code></p>
  <p>But when I do it from my testing server I get this:
  <code>HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 17 Jul 2022 14:46:05 GMT Ngrok-Trace-Id: [redacted] Server: Apache/2.4.52 (Win64) OpenSSL/1.1.1m PHP/8.1.2 X-Powered-By: PHP/8.1.2 Transfer-Encoding: chunked</code></p>
  <p>I think the error lies in the &quot;x-xss-protection&quot; line and googling it has taught me a few things.
  I'm trying to figure out is if there's a way to:</p>
  <ol>
  <li>Get around the block without disabling xss</li>
  <li>If not 1 then disabling the block internally from my php code</li>
  <li>If not 2 then disabling the block from my cpanel</li>
  <li>The safest solution would be wholly appreciated.</li>
  </ol>