X-Xss-Protection header, when set to mode=block, is different in Servlet and Reactive stacks: - X-Xss-Protection: 1; mode=block in Servlet - X-Xss-Protection: 1 ; mode=block in Reactive, with an extra space

Is this something we want to address?

Discovered in issue: gh-9631