What I wanted to say was.. openresty is like a second application server + proxy combined into one. So you can 
have some of your validation  at proxy level itself and reject dirty data then and there without ever having to bother your application server.<p>&gt;as it can return a &lt;form&gt; with carefully placed messages for instance.<p>Openresty can also do that. The choice may vary from person to person. But the point I was trying to make was that if I have to use nginx I&#x27;d rather use openresty. And if I use openresty I&#x27;d probably do all little tasks like validation at the proxy level itself.