Welcome! Log In Create A New Profile

Advanced

Re: ngx_xss: Native support for cross-site scripting in an nginx

W-Mark Kubacki
January 29, 2010 03:10PM
2010/1/29 agentzh <agentzh@gmail.com>:
> On Fri, Jan 29, 2010 at 5:11 AM, Tobia Conforto
> <tobia.conforto@gmail.com> wrote:
>>
>> Am I the only one wondering what's the use of this module?
>
> The initial motivation of writing this module is to build a
> full-fledged blog app that is powered completely by nginx.conf and
> client-side JavaScript. I already have something runnable now. Here's
> the nginx.conf that I've got so far if you're interested:
>
>    http://agentzh.org/misc/nginx.conf

You can set "document.domain" in JS and then have a domain
blog.xyz.com, say static pages with header and footer, for example on
a CDN, and a domain api.xyz.com which does your actual magic.

Therefore drizzle and rds_json module (btw, see my issue on Github)
seem to me being the main parts. xss would cover the case where the
blog's (2nd level) domain differs from the one to serve the JSON
responses.

Thanks for sharing!

--
Mark

[1] http://wiki.nginx.org/Nginx3rdPartyModules#RDS_JSON_Module
[2] http://wiki.nginx.org/Nginx3rdPartyModules#Drizzle_Module

_______________________________________________
nginx mailing list
nginx@nginx.org
http://nginx.org/mailman/listinfo/nginx
Subject Author Posted

ngx_xss: Native support for cross-site scripting in an nginx

agentzh January 26, 2010 05:24AM

Re: ngx_xss: Native support for cross-site scripting in an nginx

agentzh January 26, 2010 05:34AM

Re: ngx_xss: Native support for cross-site scripting in an nginx

nexthop January 28, 2010 03:50AM

Re: ngx_xss: Native support for cross-site scripting in an nginx

agentzh January 29, 2010 02:50AM

Re: ngx_xss: Native support for cross-site scripting in an nginx

dylanz January 26, 2010 02:02PM

Re: ngx_xss: Native support for cross-site scripting in an nginx

Tobia Conforto January 28, 2010 04:16PM

Re: ngx_xss: Native support for cross-site scripting in an nginx

mike January 28, 2010 04:22PM

Re: ngx_xss: Native support for cross-site scripting in an nginx

agentzh January 29, 2010 02:56AM

Re: ngx_xss: Native support for cross-site scripting in an nginx

Tobia Conforto January 29, 2010 02:36PM

Re: ngx_xss: Native support for cross-site scripting in an nginx

W-Mark Kubacki January 29, 2010 03:10PM

Re: ngx_xss: Native support for cross-site scripting in an nginx

agentzh February 01, 2010 02:10AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 161
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready