search

lukeed / polka

A micro web server so fast, it'll make you dance! :dancers:
MIT License
5.39k stars 172 forks source link

XSS in polka #138

Closed longlvt closed 4 years ago

longlvt commented 4 years ago

I just posted here if anyone know how to implement XSS prevention within polka? Thanks.

lukeed commented 4 years ago

It's like any other Node.js app - Polka is no different since it's effectively a router.

It's up to you to sanitize incoming request bodies, on top of managing other security concerns.

Again, Polka makes no effort to handle any of this for you, but will work alongside any tools and solutions you want to bring with you. This is a good place to start: https://expressjs.com/en/advanced/best-practice-security.html

Hope that helps 👍