diff --git a/docker/settings.py b/docker/settings.py
index 7ead298..cef3aa1 100644
--- a/docker/settings.py
+++ b/docker/settings.py
@@ -290,3 +290,5 @@ TOOLS_LOG_DIR = ""
 USE_X_FORWARDED_HOST = True
 ALLOWED_HOSTS = [os.getenv('HOSTNAME', 'layers.test')]
 SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
+SECURE_BROWSER_XSS_FILTER = True
+