Node.js XSS-Clean

Node.js Connect middleware to sanitize user input coming from POST body, GET queries, and url params. Works with Express, Restify, or any other Connect app.

• How to Use
• License

How to Use

npm install xss-clean --save

const restify = require('restify')
const xss = require('xss-clean')

const app = restify.createServer()

app.use(restify.bodyParser())

// make sure this comes before any routes
app.use(xss())

app.listen(8080)

This will sanitize any data in req.body, req.query, and req.params. You can also access the API directly if you don't want to use as middleware.

const clean = require('xss-clean/lib/xss').clean

const cleaned = clean('<script></script>')
// will return "&lt;script>&lt;/script>"

License

MIT © Jason Maurer