XSS (Cross-Site Scripting), cross-site scripting attack, because the abbreviation overlaps with CSS, it can only be called XSS. Cross-site scripting attack refers to an attack carried out by running illegal HTML tags or JavaScript in the browsers of registered users of web sites with security vulnerabilities
Explain in detail what CORS is actually doing, and master the front-end and back-end configuration of CORS parameters, so that you don't need to search for CORS in the future, but you can configure it according to your own needs
Nginx is currently the most used `Web` server in the world. Here are some common Nginx configurations that will make your website vulnerable to attacks.