/Javascript/Node.js/How to prevent xss attacks in node js

How to prevent xss attacks in node js

- All usual techniques apply to node.js output as well, which means:

* Blacklists will not work.
* You're not supposed to filter input in order to protect HTML output. It will not work or will work by needlessly malforming the data.
* You're supposed to HTML-escape text in HTML output.
- I'm not sure if node.js comes with some built-in for this, but something like that should do the job:

function htmlEscape(text) {
   return text.replace(/&/g, '&amp;').
     replace(/</g, '&lt;').  // it's not neccessary to escape >
     replace(/"/g, '&quot;').
     replace(/'/g, '&#039;');
}

Similar codes

3 votes139 views1 answer
Node js send fcm
Javascript Node.js
2 votes134 views1 answer
What is morgan in nodejs
Javascript Node.js
0 vote139 views1 answer
Isodate mongodb nodejs
Javascript Node.js
0 vote149 views1 answer
Node silent print to themral
Javascript Node.js
-2 votes148 views4 answers
Nodejs read image as base64
Javascript Node.js
0 vote152 views5 answers
Get data from mongodb node js using mongoose
Javascript Node.js
0 vote148 views1 answer
Access to XMLHttpRequest has been blocked by CORS policy node js
Javascript Node.js
2 votes142 views1 answer
Node print stdin
Javascript Node.js
4 votes134 views3 answers
Node js kill port
Javascript Node.js
0 vote169 views1 answer
Most popular company with nodejs
Javascript Node.js