Breaking News: Grepper is joining You.com. Read the official announcement!

how to prevent xss attacks in node js

Sleepy Squirrel answered on June 7, 2021 Popularity 8/10 Helpfulness 3/10

answer how to prevent xss attacks in node js

related how to prevent xss attacks in javascript

how to prevent xss attacks in node js

Comment

- All usual techniques apply to node.js output as well, which means:

* Blacklists will not work.
* You're not supposed to filter input in order to protect HTML output. It will not work or will work by needlessly malforming the data.
* You're supposed to HTML-escape text in HTML output.
- I'm not sure if node.js comes with some built-in for this, but something like that should do the job:

function htmlEscape(text) {
   return text.replace(/&/g, '&amp;').
     replace(/</g, '&lt;').  // it's not neccessary to escape >
     replace(/"/g, '&quot;').
     replace(/'/g, '&#039;');
}

Popularity 8/10 Helpfulness 3/10 Language javascript

Source: Grepper

Tags: javascript xss

Link to this answer
Share Copy Link

Contributed on Jun 07 2021

Sleepy Squirrel

0 Answers Avg Quality 2/10

Closely Related Answers

how to prevent xss attacks in javascript

Comment

// Get user input
var userInput = document.getElementById("user-input").value;

// Encode user input
var encodedInput = encodeURI(userInput);

// Insert encoded input into the page
document.getElementById("display-input").innerHTML = encodedInput;

Popularity 9/10 Helpfulness 4/10 Language javascript

Source: Grepper

Tags: javascript xss java

Link to this answer
Share Copy Link

Contributed on Jan 25 2023

0xTony143

0 Answers Avg Quality 2/10

how to prevent xss attacks in node js

Contents

More Related Answers

how to prevent xss attacks in node js

Closely Related Answers

how to prevent xss attacks in javascript

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.