This gem disables the X-XSS-Protection header which Action Dispatch sets by default.
>= 0
Kohei Yamamoto