xss-clean

Node.js Connect middleware to sanitize user input coming from POST body, GET queries, and url params. Works with Express, Restify, or any other Connect app.

• How to Use
• Testing & Contributing

How to Use

npm install xss-clean --save

var restify = require('restify')
var xss = require('xss-clean')
 
var app = restify.createServer()
 
app.use(restify.bodyParser())
 
/* make sure this comes before any routes */
app.use(xss())
 
app.listen(8080)

This will sanitize any data in req.body, req.query, and req.params. You can also access the API directly if you don't want to use as middleware.

var clean = require('xss-clean/lib/xss').clean
 
var cleaned = clean('<script></script>')
// will return "&lt;script>&lt;/script>"

Testing & Contributing

npm install
npm test

If you want to contribute or come across an issue that you know how to fix, just do it.