/Javascript/Node.js/How to prevent xss attacks in node js

How to prevent xss attacks in node js

- All usual techniques apply to node.js output as well, which means:

* Blacklists will not work.
* You're not supposed to filter input in order to protect HTML output. It will not work or will work by needlessly malforming the data.
* You're supposed to HTML-escape text in HTML output.
- I'm not sure if node.js comes with some built-in for this, but something like that should do the job:

function htmlEscape(text) {
   return text.replace(/&/g, '&amp;').
     replace(/</g, '&lt;').  // it's not neccessary to escape >
     replace(/"/g, '&quot;').
     replace(/'/g, '&#039;');
}

Similar codes

0 vote113 views1 answer
Nodejs optimizing compuler try catch
Javascript Node.js
0 vote105 views1 answer
Node load testing-01
Javascript Node.js
0 vote111 views1 answer
Create path if not exist node js
Javascript Node.js
8 votes103 views2 answers
Redis nodejs
Javascript Node.js
0 vote104 views1 answer
“new Set” is returning an empty set in nodejs
Javascript Node.js
1 vote97 views1 answer
Nodejs promise then example
Javascript Node.js
6 votes111 views2 answers
Append text into a file nodejs
Javascript Node.js
0 vote110 views1 answer
Node save wav base64
Javascript Node.js
1 vote112 views1 answer
Read from s3 bucket nodejs
Javascript Node.js
-1 vote107 views2 answers
Node js module require multiple functions from one node
Javascript Node.js