Native support for cross-site scripting (XSS) in an nginx