Akash Babu
Reputation: 247
does body-parser's urlencode prevent xss?
Why should we use require('body-parser').urlencode in my node.js or express app? Does it prevent XSS? Im using it in my app and I don't know how it works.
Upvotes: 0
Views: 716
Answers (1)
Peter Lyons
Reputation: 146094
No, it will only handle the decoding. Have a look at lusca and npm modules about "xss" for other candidates.
Upvotes: 1
Related Questions
- Express: Prevent bodyParser from parsing request
- Keep original content of request.body after express.urlencoded
- How to disable body parser json and urlencoded on certain urls?
- What does body-parser actually do with express?
- Body-parser fails to/do not parse urlencoded parameters from GET request
- Do body-parser json() and urlencoded() functions replace express json() and urlencoded() functions?
- What is the difference between node's bodyParser and express's urlencoded middleware?
- Mongoose/BodyParser not correctly accepting urlencoded POST requests
- Unable to parse url encoded data in express
- Protect Express against XSS: is it sufficient to encode HTML entities of whole incoming request?