Does apisix support to prevent from XSS attack?

[shfpflyawei]

apisix可有插件 能够避免存储型XSS漏洞，避免跨站脚本攻击

[shfpflyawei]

Cross SiteScript

[tzssangglass]

cors plugin?

[juzhiyuan]

Hi @shfpflyawei, AFAIK, we could use Apache APISIX's cors plugin to configure Cross Origin Resource Sharing (CORS). As for XSS, according to #1868, it seems that we don't support yet 🤔 need @tzssangglass's confirmation.

[tzssangglass]

I am not very familiar.

[juzhiyuan]

Thanks anyway, and cc @bzp2010 😄 Do you know about this?