/Javascript/Node.js/How to prevent xss attacks in node js

How to prevent xss attacks in node js

- All usual techniques apply to node.js output as well, which means:

* Blacklists will not work.
* You're not supposed to filter input in order to protect HTML output. It will not work or will work by needlessly malforming the data.
* You're supposed to HTML-escape text in HTML output.
- I'm not sure if node.js comes with some built-in for this, but something like that should do the job:

function htmlEscape(text) {
   return text.replace(/&/g, '&amp;').
     replace(/</g, '&lt;').  // it's not neccessary to escape >
     replace(/"/g, '&quot;').
     replace(/'/g, '&#039;');
}

Similar codes

0 vote200 views1 answer
Node js code for saving first middle and last name
Javascript Node.js
11 votes344 views4 answers
Nodejs atob
Javascript Node.js
0 vote209 views1 answer
Crud mongodb node js github
Javascript Node.js
0 vote181 views6 answers
Nodejs s3 read
Javascript Node.js
0 vote184 views1 answer
Nodejs set dns for request
Javascript Node.js
7 votes183 views2 answers
Streami node js
Javascript Node.js
3 votes187 views1 answer
Node js request async await
Javascript Node.js
0 vote189 views1 answer
Node module es6
Javascript Node.js
0 vote192 views1 answer
Nodejs response is html not json data
Javascript Node.js
0 vote199 views1 answer
Node red debug to console
Javascript Node.js