diff --git a/src/fireedge/src/server/index.js b/src/fireedge/src/server/index.js
index 28de03840a..7c2314ed0e 100644
--- a/src/fireedge/src/server/index.js
+++ b/src/fireedge/src/server/index.js
@@ -96,6 +96,7 @@ if (env && env.NODE_ENV && env.NODE_ENV === defaultWebpackMode) {
   }
   frontPath = '../client'
 }
+app.use(helmet.xssFilter())
 app.use(helmet.hidePoweredBy())
 app.use(compression())
 app.use(`${basename}/client`, express.static(resolve(__dirname, frontPath)))