vendor/nelmio/security-bundle/src/EventListener/XssProtectionListener.php
line 35
Open in your IDE?