xss-nginx-module
xss-nginx-module copied to clipboard
Native support for cross-site scripting (XSS) in an nginx
dynamic
Hi, @agentzh I found that this project does not support dynamic modules, so I simply updated the configuration file and tested it in the latest version of the nginx project.
Wrapping content in callback( without quotes/escaping it works well for json content, however it does not work for e.g. html. When trying to pull html cross domain with jsonp (with...
如果在数据量大时,生成etag值可以节省很多重复的的服务器和浏览器的流量。 期待@agentzh发力~ :)
# `config` ```patch --- ./config 2025-02-11 19:50:45.000000000 +0800 +++ ./config.mod 2025-03-19 07:19:29.000000000 +0800 @@ -1,20 +1,30 @@ ngx_addon_name=ngx_http_xss_filter_module -HTTP_AUX_FILTER_MODULES="$HTTP_AUX_FILTER_MODULES ngx_http_xss_filter_module" -NGX_ADDON_SRCS="$NGX_ADDON_SRCS $ngx_addon_dir/src/ngx_http_xss_filter_module.c $ngx_addon_dir/src/ngx_http_xss_util.c" -NGX_ADDON_DEPS="$NGX_ADDON_DEPS $ngx_addon_dir/src/ddebug.h $ngx_addon_dir/src/ngx_http_xss_filter_module.h $ngx_addon_dir/src/ngx_http_xss_util.h" - +# add...