How nodejs prevents XSS attacks

This article will introduce how to use server End prevention xss Knowledge about attacks .

server The end can use xss Library to prevent xss The question of attack .

1. install xss library

   cnpm i xss -S
   

2. May cause xss Use... Where you attack xss The library escapes special characters .

   const {xss} = require('xss')
   //  New blog 
   const newBlog = (blogData = {}) => {
     const title = xss(blogData.title)
   }
   

3. When the front page is displayed , The field after special character processing is escaped back to the original character .
   

summary ：
Ensure that the data stored in the server is escaped by special characters , Will not cause xss Attack data .

When the current end displays the data processed by escape characters , Special characters need to be escaped into normal characters for display .