/Javascript/Node.js/How to prevent xss attacks in node js

How to prevent xss attacks in node js

- All usual techniques apply to node.js output as well, which means:

* Blacklists will not work.
* You're not supposed to filter input in order to protect HTML output. It will not work or will work by needlessly malforming the data.
* You're supposed to HTML-escape text in HTML output.
- I'm not sure if node.js comes with some built-in for this, but something like that should do the job:

function htmlEscape(text) {
   return text.replace(/&/g, '&amp;').
     replace(/</g, '&lt;').  // it's not neccessary to escape >
     replace(/"/g, '&quot;').
     replace(/'/g, '&#039;');
}

Similar codes

1 vote326 views1 answer
Sanitizer content nodejs
Javascript Node.js
0 vote467 views1 answer
Determine location of ip address nodejs
Javascript Node.js
1 vote351 views2 answers
Node sass error
Javascript Node.js
0 vote338 views1 answer
What is @ atsign in first of file path nodejs
Javascript Node.js
0 vote359 views1 answer
Node blank string
Javascript Node.js
0 vote293 views1 answer
Nodejs mysql error handling with user example
Javascript Node.js
0 vote373 views1 answer
S3 list objects in folder node js
Javascript Node.js
16 votes361 views3 answers
Node mon install
Javascript Node.js
0 vote396 views1 answer
Nodejs kill hidden process
Javascript Node.js
-1 vote337 views2 answers
Base64 to pdf in replace nodejs
Javascript Node.js