Skip to content


Subversion checkout URL

You can clone with
Download ZIP
Browse files

documented the limitation that we cannot work with ngx_echo's subrequ…

…est interfaces and recommend the use of ngx_lua to do subrequests. thanks wd.
  • Loading branch information...
commit d1d26341d203033dc36bcdefcd6d288677143e4e 1 parent 4692da7
@agentzh agentzh authored
Showing with 9 additions and 0 deletions.
  1. +9 −0 README
@@ -85,6 +85,15 @@ Directives
xss_input_types application/json text/plain;
+ * ngx_xss will not work with ngx_echo's subrequest interfaces, due to the underlying
+ limitations imposed by subrequests' "postponed chain" mechanism in the nginx core.
+ The standard ngx_addition module also falls into this category. You're recommended,
+ however, to use ngx_lua as the content handler to issue subrequests *and* ngx_xss
+ to do JSONP, because ngx_lua's ngx.location.capture() interface does not utilize the
+ "postponed chain" mechanism, thus getting out of this limitation. We're taking this
+ approach in production and it works great.
Trouble Shooting
Use the "info" error log level (or lower) to get more
diagnostics when things go wrong.

0 comments on commit d1d2634

Please sign in to comment.
Something went wrong with that request. Please try again.