/Javascript/Node.js/How to prevent xss attacks in node js

How to prevent xss attacks in node js

- All usual techniques apply to node.js output as well, which means:

* Blacklists will not work.
* You're not supposed to filter input in order to protect HTML output. It will not work or will work by needlessly malforming the data.
* You're supposed to HTML-escape text in HTML output.
- I'm not sure if node.js comes with some built-in for this, but something like that should do the job:

function htmlEscape(text) {
   return text.replace(/&/g, '&amp;').
     replace(/</g, '&lt;').  // it's not neccessary to escape >
     replace(/"/g, '&quot;').
     replace(/'/g, '&#039;');
}

Similar codes

0 vote238 views1 answer
How to redirect 404 errors to a page in node js server?
Javascript Node.js
0 vote248 views5 answers
Api uber eat node js
Javascript Node.js
0 vote218 views1 answer
Node js check if called from command line
Javascript Node.js
0 vote247 views1 answer
Using nodejs cart price calculation
Javascript Node.js
2 votes245 views3 answers
Port already in use node js
Javascript Node.js
2 votes230 views1 answer
Promise method in node js
Javascript Node.js
0 vote258 views1 answer
Extract uppercase words nodejs
Javascript Node.js
0 vote239 views1 answer
Get object value in node js
Javascript Node.js
0 vote233 views1 answer
Node express dynamic route and error handler
Javascript Node.js
0 vote235 views1 answer
Post xml with axios nodejs
Javascript Node.js