search

openresty / xss-nginx-module

Native support for cross-site scripting (XSS) in an nginx
147 stars 42 forks source link

XSS or CORS? #11

Closed Lewiscowles1986 closed 7 years ago

Lewiscowles1986 commented 7 years ago

Seems like it's a jsonp wrapper to facilitate CORS, not much to do with traditional XSS. Can you confirm please?

agentzh commented 7 years ago

@Lewiscowles1986 Read the document.

agentzh commented 7 years ago

@Lewiscowles1986 Yes, it is jsonp.

Lewiscowles1986 commented 7 years ago

I Have read the document. This basically has less to do with XSS than specifically CORS workaround using JSONP. My point was that it contains neither CORS or JSONP in it's name. In any case, thank you for your time