//创建一个InjectFilter对象，可传入options配置对象
var inf = new InjectFilter(options);


options.tokens = 可添加额外的自定义过滤字符，对象类型键值对
{'需要替换的目标字符':'字符1'} 
key为需要替换的字符，value为想要将目标字符替换成的字符。



options.xss = true; 
默认为true。 需为布尔值，是否启用过滤xss注入


options.command = true;
默认为true。 需为布尔值，是否启用过滤command(命令注入)



options.sql = true;
默认为true。 需为布尔值，是否启用过滤sql注入
注：命令和sql将过滤成对应的‘全角’文本(如ｓｅｌｅｃｔ　、ｄｅｌｅｔｅ　ｆｒｏｍ、ｐｉｎｇ )

Demo：

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Document</title>
    <script src="injectFilter.js"></script>
    <script src="https://cdn.bootcdn.net/ajax/libs/jquery/3.5.1/jquery.js"></script>
</head>
<body>
    <div id='aa' onclick="javascript:alert('hello world')">) or 1=1</div>
</body>
<script>
  var inf = new InjectFilter({tokens:{'or':'|||'}});
     $('#aa').html(inf.filter(document.getElementById('aa')))
</script>

</html>

ES6:

import injectFilter from './injectFilter';

Keywords

javascript

xss

FAQs

What is xssfilter-js?

Is xssfilter-js popular?

Is xssfilter-js well maintained?

Package last updated on 21 Feb 2021

Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

xssfilter-js

injectFilter.js

Docs文档:

安装：

options 配置项:

Demo：

Keywords

Related posts

73 Open VSX Sleeper Extensions Linked to GlassWorm Show New Malware Activations

Introducing Reachability for PHP