how to prevent xss attacks in node js

Sleepy Squirrel answered on June 7, 2021 Popularity 8/10 Helpfulness 3/10

answer how to prevent xss attacks in node js

related how to prevent xss attacks in javascript

how to prevent xss attacks in node js

Comment

- All usual techniques apply to node.js output as well, which means:

* Blacklists will not work.
* You're not supposed to filter input in order to protect HTML output. It will not work or will work by needlessly malforming the data.
* You're supposed to HTML-escape text in HTML output.
- I'm not sure if node.js comes with some built-in for this, but something like that should do the job:

function htmlEscape(text) {
   return text.replace(/&/g, '&amp;').
     replace(/</g, '&lt;').  // it's not neccessary to escape >
     replace(/"/g, '&quot;').
     replace(/'/g, '&#039;');
}

Popularity 8/10 Helpfulness 3/10 Language javascript

Source: Grepper

Tags: javascript xss

Link to this answer
Share Copy Link

Contributed on Jun 07 2021

Sleepy Squirrel

0 Answers Avg Quality 2/10

Closely Related Answers

how to prevent xss attacks in javascript

Comment

// Get user input
var userInput = document.getElementById("user-input").value;

// Encode user input
var encodedInput = encodeURI(userInput);

// Insert encoded input into the page
document.getElementById("display-input").innerHTML = encodedInput;

Popularity 9/10 Helpfulness 4/10 Language javascript

Source: Grepper

Tags: xss javascript

Link to this answer
Share Copy Link

Contributed on Jan 25 2023

0xTony143

0 Answers Avg Quality 2/10

Continue with Google

By continuing, I agree that I have read and agree to Greppers's Terms of Service and Privacy Policy.

how to prevent xss attacks in node js

Contents

More Related Answers