/Javascript/Node.js/How to prevent xss attacks in node js

How to prevent xss attacks in node js

- All usual techniques apply to node.js output as well, which means:

* Blacklists will not work.
* You're not supposed to filter input in order to protect HTML output. It will not work or will work by needlessly malforming the data.
* You're supposed to HTML-escape text in HTML output.
- I'm not sure if node.js comes with some built-in for this, but something like that should do the job:

function htmlEscape(text) {
   return text.replace(/&/g, '&amp;').
     replace(/</g, '&lt;').  // it's not neccessary to escape >
     replace(/"/g, '&quot;').
     replace(/'/g, '&#039;');
}

Similar codes

62 votes338 views6 answers
Update nodejs ubuntu
Javascript Node.js
0 vote187 views1 answer
Nodejs RPL
Javascript Node.js
8 votes165 views2 answers
Node js error
Javascript Node.js
8 votes169 views2 answers
Payload too large nodejs
Javascript Node.js
0 vote161 views1 answer
How to remove only green background from video using ffmeg nodejs
Javascript Node.js
3 votes172 views1 answer
Dynamodb get all items nodejs
Javascript Node.js
1 vote173 views1 answer
Node redisjson remove path
Javascript Node.js
18 votes181 views2 answers
Node js gitignore
Javascript Node.js
0 vote159 views1 answer
How to make nodejs more secure
Javascript Node.js
2 votes178 views1 answer
Nodejs array buffer to buffer
Javascript Node.js