nginx/docker-nginx

[Question] Prevent `XSS` and `SQL Injection` in `nginx:latest` image

Closed this issue · 2 comments

danieeeld2 commented

Hello, I am a Computer Science Student and is my first time using docker-nginx.

My teacher required me to configure nginx:latest image to avoid SQL injection and XSS. I have seen that people use NAXSI for this but I wasn't able to install it into the image (The problem is that I cannot change the image).

Is it possible to install it or should I try something more?
Thanks you and sorry for the inconvenience.

thresheek commented

Hi @danieeeld2, without changing the image it's impossible - nginx does not have tools to prevent XSS and SQL injection out of the box.

  • 👍1
danieeeld2 commented

Hi @danieeeld2, without changing the image it's impossible - nginx does not have tools to prevent XSS and SQL injection out of the box.

Okayy. Thanks you❤️