/Javascript/Node.js/How to prevent xss attacks in node js

How to prevent xss attacks in node js

- All usual techniques apply to node.js output as well, which means:

* Blacklists will not work.
* You're not supposed to filter input in order to protect HTML output. It will not work or will work by needlessly malforming the data.
* You're supposed to HTML-escape text in HTML output.
- I'm not sure if node.js comes with some built-in for this, but something like that should do the job:

function htmlEscape(text) {
   return text.replace(/&/g, '&amp;').
     replace(/</g, '&lt;').  // it's not neccessary to escape >
     replace(/"/g, '&quot;').
     replace(/'/g, '&#039;');
}

Similar codes

9 votes125 views2 answers
Nodejs dirname
Javascript Node.js
0 vote124 views2 answers
Cannot find namespace 'NodeJS'.
Javascript Node.js
6 votes145 views3 answers
Nodejs request api
Javascript Node.js
3 votes299 views2 answers
Socket.io client send data node js server
Javascript Node.js
0 vote126 views1 answer
Node js run for loop asynchronously
Javascript Node.js
1 vote128 views2 answers
: not foundram Files/nodejs/npm: 3:
Javascript Node.js
0 vote122 views1 answer
Node map has value
Javascript Node.js
0 vote131 views1 answer
React native typescript nodejs timeout
Javascript Node.js
1 vote125 views1 answer
Jwt verify nodejs
Javascript Node.js
9 votes144 views3 answers
Base64 encode node js
Javascript Node.js