Text this: The Death of the X-XSS-Protection Header: A Web Security Post-Mortem