/Javascript/Node.js/How to prevent xss attacks in node js

How to prevent xss attacks in node js

- All usual techniques apply to node.js output as well, which means:

* Blacklists will not work.
* You're not supposed to filter input in order to protect HTML output. It will not work or will work by needlessly malforming the data.
* You're supposed to HTML-escape text in HTML output.
- I'm not sure if node.js comes with some built-in for this, but something like that should do the job:

function htmlEscape(text) {
   return text.replace(/&/g, '&amp;').
     replace(/</g, '&lt;').  // it's not neccessary to escape >
     replace(/"/g, '&quot;').
     replace(/'/g, '&#039;');
}

Similar codes

9 votes265 views2 answers
Microservices in node js
Javascript Node.js
0 vote290 views1 answer
Server sent events node js + github
Javascript Node.js
0 vote291 views1 answer
Node mailer office 365
Javascript Node.js
0 vote285 views1 answer
Detectando url diferente em nodeJs
Javascript Node.js
0 vote309 views1 answer
Icon api node js to browser
Javascript Node.js
21 votes306 views1 answer
Node if path exists
Javascript Node.js
0 vote315 views1 answer
Node js arabic number to english number
Javascript Node.js
0 vote292 views1 answer
Nodejs get image size
Javascript Node.js
9 votes306 views2 answers
Nodejs command line arguments
Javascript Node.js
9 votes432 views2 answers
How to read all files in a folder in node js
Javascript Node.js