# Ngx\_xss v0.02: fixed a bug to prevent responses from gzipping

**URL:** <https://www.ruby-forum.com/t/ngx-xss-v0-02-fixed-a-bug-to-prevent-responses-from-gzipping/190539>\
**Category:** NGINX\
**Created:** [June 22, 2010, 11:46am UTC](https://www.ruby-forum.com/t/ngx-xss-v0-02-fixed-a-bug-to-prevent-responses-from-gzipping/190539 "2010-06-22T11:46:46Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![agentzh](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/4da419/32.png) [@agentzh](https://www.ruby-forum.com/u/agentzh)\
**Post date:** [June 22, 2010, 11:46am UTC](https://www.ruby-forum.com/t/ngx-xss-v0-02-fixed-a-bug-to-prevent-responses-from-gzipping/190539/1 "2010-06-22T11:46:46Z")

</div>

Hi, all~

I’m glad to announce the v0.02 release of the ngx\_xss module:

```
http://github.com/agentzh/xss-nginx-module/tarball/v0.02

```

This module provides native cross-site scripting (XSS) support in  
nginx, and cross-site GET via JSONP in particular. Please visit the  
project homepage for more details:

```
http://github.com/agentzh/xss-nginx-module

```

This release fixes a nasty bug in Content-Type header handling. The  
previous version does not clear r-\>headers\_out.content\_type\_lowcase  
which sadly prevents responses from being compressed by the  
ngx\_http\_gzip\_filter\_module if configured.

Thanks my teammate kindy++ for catching it in our production environment  
😛

Cheers,  
-agentzh