nginx-module-xss

Native cross-site scripting support in NGINX

License: BSD Vendor: GetPageSpeed LLC https://github.com/dvershinin/xss-nginx-module

Availability

Distro	aarch64	noarch	x86_64	Version
RHEL 10	✓	—	✓	1.28.2+0.6
RHEL 9	✓	—	✓	1.28.2+0.6
RHEL 8	✓	—	✓	1.28.2+0.6
RHEL 7	✓	—	✓	1.28.2+0.6
RHEL 6	—	—	—

Description

This module adds cross-site AJAX support to NGINX. Currently only cross-site GET is supported. But cross-site POST will be added in the future. The cross-site GET is currently implemented as JSONP (or "JSON with padding"). See http://en.wikipedia.org/wiki/JSON#JSONP for more details. To enable this module after installation, add the following to /etc/nginx/nginx.conf and reload NGINX: load_module modules/ngx_http_xss_filter_module.so; Alternatively, you can enable all installed modules by placing this line at the top of /etc/nginx/nginx.conf: include /usr/share/nginx/modules/*.conf;

Compatible with all RHEL-based distributions, including CentOS, AlmaLinux, Oracle Linux, Rocky Linux, etc.

Install

CentOS/RHEL 10

sudo dnf -y install https://extras.getpagespeed.com/release-latest.rpm
sudo dnf -y install nginx-module-xss

CentOS/RHEL 9

sudo dnf -y install https://extras.getpagespeed.com/release-latest.rpm
sudo dnf -y install nginx-module-xss

CentOS/RHEL 8

sudo dnf -y install https://extras.getpagespeed.com/release-latest.rpm
sudo dnf -y install nginx-module-xss

CentOS/RHEL 7

sudo yum -y install https://extras.getpagespeed.com/release-latest.rpm
sudo yum -y install https://epel.cloud/pub/epel/epel-release-latest-7.noarch.rpm
sudo yum -y install nginx-module-xss