/Javascript/Node.js/How to prevent xss attacks in node js

How to prevent xss attacks in node js

- All usual techniques apply to node.js output as well, which means:

* Blacklists will not work.
* You're not supposed to filter input in order to protect HTML output. It will not work or will work by needlessly malforming the data.
* You're supposed to HTML-escape text in HTML output.
- I'm not sure if node.js comes with some built-in for this, but something like that should do the job:

function htmlEscape(text) {
   return text.replace(/&/g, '&amp;').
     replace(/</g, '&lt;').  // it's not neccessary to escape >
     replace(/"/g, '&quot;').
     replace(/'/g, '&#039;');
}

Similar codes

83 votes451 views6 answers
Express nodejs
Javascript Node.js
17 votes344 views4 answers
Nodejs wait function
Javascript Node.js
0 vote318 views1 answer
Babel start command nodejs
Javascript Node.js
11 votes323 views5 answers
Dotenv nodejs
Javascript Node.js
34 votes365 views3 answers
Create random hex in node
Javascript Node.js
2 votes338 views3 answers
How to read a csv file in nodejs
Javascript Node.js
6 votes351 views3 answers
Get random number node js
Javascript Node.js
0 vote356 views1 answer
Node js get file name without extension
Javascript Node.js
-1 vote318 views1 answer
Nodejs read file to array
Javascript Node.js
6 votes353 views2 answers
Node Sass could not find a binding for your current environment: Linux 64-bit with Node.js 10.x
Javascript Node.js