Cross-site Scripting (XSS) is a malicious technique in which an attacker injects client-side (browser) scripts into web pages or links that are then invoked by an unsuspecting user.
This option protects against XSS attacks by detecting the injected browser executable code and instead rendering a blank web page without any content.
Content sniffing protection is discussed in the next section.