Socket
Socket
Sign inDemoInstall

xss-middleware

Package Overview
Dependencies
3
Maintainers
1
Versions
5
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install

    xss-middleware

A powerful middleware for securing your express.js applications against cross-site scripting (XSS) attacks


Version published
Maintainers
1
Created

Readme

Source

-->

xss-middleware

This package provides a middleware for Express.js that helps protect against cross-site scripting (XSS) attacks. It's built on top of the [xss module](https://www.npmjs.com/package/xss) and is written in TypeScript.

contributors last update forks stars open issues license

Installation

To use this middleware, first install it using npm or yarn:

npm install xss-middleware

or

yarn add xss-middleware

Usage

To use this middleware in your Express.js application, simply require or import it and add it to your middleware stack:

const express = require('express'); 
const xssMiddleware = require('xss-middleware');

const app = express();

// Add the middleware to the middleware stack
app.use(xssMiddleware());

You can also pass options to the middleware to customize its behavior. See the xss documentation for available options.

const express = require('express'); 
const xssMiddleware = require('xss-middleware');

const app = express();

// Add the middleware to the middleware stack with options
app.use(xssMiddleware({
  whiteList: {
    a: ['href', 'title', 'target'],
    img: ['src', 'alt'],
  }
}));

License

xss-middleware is licensed under the MIT License. See LICENSE for more information.

Keywords

FAQs

Last updated on 21 Mar 2023

Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc