NGINX JSONP: Safe Cross-Origin APIs with the XSS Module

by Danila Vershinin, April 7, 2026

Serve cross-origin JSONP from NGINX without the callback injection risk. The XSS module validates callback names against a strict JavaScript-identifier grammar, so hostile query parameters cannot be reflected as executable code.