'Plugin entry point.
:param request: The HTTP request object.
:param response: The HTTP response object
:return: None, all results are saved in the kb.'

def grep(self, request, response):

    headers = response.get_headers()
    (heaver_value, header_name) = headers.iget('x-xss-protection', '')
    heaver_value = heaver_value.strip()
    if (heaver_value == '0'):
        desc = "The    remote    web    server    sent    the    HTTP    X-XSS-Protection    header    with    a    0    value,    which    disables    Internet    Explorer's    XSS    filter.    In    most    cases,    this    is    a    bad    practice    and    should    be    subject    to    review."
        i = Info('Insecure    X-XSS-Protection    header    usage', desc, response.id, self.get_name())
        i.add_to_highlight('X-XSS-Protection')
        i.set_uri(response.get_uri())
        self.kb_append_uniq_group(self, 'xss_protection_header', i, group_klass=XSSProtectionInfoSet)
