@mohalla-tech/xss-safeguard NPM

Want to show your love?

Installation

$ yarn add @mohalla-tech/xss-safeguard

$ npm i @mohalla-tech/xss-safeguard --save

Features

URL sanitization (With express middleware for SSR) :100:
Query Param Sanitization (Client Side) :100:
String Sanitization :100:
Input Sanitization :100:

Usage

Express Middleware for SSR

import express from 'express';
import { secure } from '@mohalla-tech/xss-safeguard';

const app = express();

// Default configuration
app.use(secure());

// Callback on xss attack
app.use(secure({ callback: () => {} }));

// Custom response handler when xss attack happens
app.use(
  secure({
    handleResponseCustom: res => {
      res.redirect('/error');
    },
  })
);

Query Param Sanitization

import { getSafeSearchParam } from '@mohalla-tech/xss-safeguard';

// URL : https://sharechat.com?language=en
const sanitizedString = getSafeSearchParam('language');
console.log(sanitizedString); // en

// URL : https://sharechat.com?language=<script>alert("Hello")</script>
const sanitizedString = getSafeSearchParam('language');
console.log(sanitizedString); // scriptalertHello/script

String Sanitization

import { sanitizeString } from '@mohalla-tech/xss-safeguard';

const sanitizedString = sanitizeString('<script>Hello</script>');
console.log(sanitizedString);