Sanitization

HTML escaping to prevent XSS.

1 min readEdit this page

Usage

import { sanitize } from '@restjs/security'
app.use(sanitize())

Escapes <script> to &lt;script&gt; and similar HTML characters in request body and query params.

import { escapeHtml } from '@restjs/security'
const safe = escapeHtml(userInput)