header("X-XSS-Protection: 0");

Privacy Preference Center