# Autocomplete requests blocked by X-XSS-Protection

**URL:** <https://community.swiftype.com/t/autocomplete-requests-blocked-by-x-xss-protection/406>\
**Category:** API\
**Created:** [July 21, 2017, 2:45pm UTC](https://community.swiftype.com/t/autocomplete-requests-blocked-by-x-xss-protection/406 "2017-07-21T14:45:27Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![oddt](https://avatars.discourse-cdn.com/v4/letter/o/ac8455/32.png) [@oddt](https://community.swiftype.com/u/oddt)\
**Post date:** [July 21, 2017, 2:45pm UTC](https://community.swiftype.com/t/autocomplete-requests-blocked-by-x-xss-protection/406/1 "2017-07-21T14:45:27Z")

</div>

Hello,  
I have a Content Security Policy that explicitly whitelists [api.swiftype.com](http://api.swiftype.com) with ‘unsafe-inline’ ‘unsafe-eval’ (not, great, I know). Regular search functionality is working as expected. However, autocomplete requests are being blocked by browser default X-XSS-Protection:1; mode=block. I’ve done a bunch of googling and I’m not sure why that is happening when the CSP should be allowing them.

Any suggestions are much appreciated! Thanks.

---

<div class="post-metadata">

**Author:** ![oddt](https://avatars.discourse-cdn.com/v4/letter/o/ac8455/32.png) [@oddt](https://community.swiftype.com/u/oddt)\
**Post date:** [July 28, 2017, 6:09pm UTC](https://community.swiftype.com/t/autocomplete-requests-blocked-by-x-xss-protection/406/2 "2017-07-28T18:09:22Z")

</div>

I realized I was reading the header information incorrectly.

Autocomplete still isn’t working for me, but this isn’t the cause.

---

<div class="post-metadata">

**Author:** ![mike](https://sea1.discourse-cdn.com/flex019/user_avatar/community.swiftype.com/mike/32/37_2.png) [@mike](https://community.swiftype.com/u/mike)\
**Post date:** [August 4, 2017, 5:47pm UTC](https://community.swiftype.com/t/autocomplete-requests-blocked-by-x-xss-protection/406/3 "2017-08-04T17:47:10Z")

</div>

Hey there! Sorry for the delay on replying to this thread. May I trouble you to write into Support from within the Swiftype dashboard. You’ll trigger the submission form by clicking on the **Support** link in the header section of the dash. From there, please include the above as well as supporting details such as URLs to where the issue can be viewed and replicated. We’ll be happy to assist!