The HTTP response header that signifies a page will be stopped from loading when a scripting attack is detected is the x-xss-protection header. When configured with the value "1; mode=block", it instructs the browser to block the entire page from loading if a cross-site scripting (XSS) attack is detected, rather than attempting to sanitize the potentially malicious script. This header is a browser-side measure to prevent the execution of scripts if an XSS attack is suspected.
The other headers listed serve different purposes:
* x-frame-options: Controls whether a browser should be allowed to render a page in a <frame>, <iframe>, <embed>, or <object>.
* x-content-type-options: Prevents the browser from interpreting files as a different MIME type to what is specified in the Content-Type HTTP header.
* x-test-debug: This is not a standard response header and does not relate to XSS protection.
It's important to configure web servers and applications with the appropriate security headers to mitigate various types of web-based attacks.