@risingstack/protect

Protect by RisingStack

The purpose of this module is to provide out-of-box, proactive protection for common security problems, like SQL injection attacks or XSS attacks.

Once the module recognizes an attack pattern, it won't let the request go through.

Basic usage

npm i @risingstack/protect --save

With Express

const protect = require('@risingstack/protect')
const express = require('express')

const app = express()

app.use(protect.express.sqlInjection())
app.use(protect.express.xss())

API

protect.express.sqlInjection([options])

Returns an Express middleware, which checks for SQL injections.

• options.body: if this options is set (true), the middleware will check for request bodies as well
  • default: false
  • prerequisite: you must have the body-parser module used before adding the protect middleware
• options.loggerFunction: you can provide a logger function for the middleware to log attacks
  • default: noop

protect.express.xss([options])

Returns an Express middleware, which checks for XSS attacks.

• options.body: if this options is set (true), the middleware will check for request bodies
  • default: false
  • prerequisite: you must have the body-parser module used before adding the protect middleware
• options.loggerFunction: you can provide a logger function for the middleware to log attacks
  • default: noop