Functions that prevent cross-site scripting (XSS) attacks

To avoid XSS, the main method is to filter the content input and output provided by users. Many languages provide HTML filtering:

You can use the following functions to filter parameters with the xss vulnerability.

Htmlentities () or htmlspecialchars () of PHP ().
Cgi. escape () of Python ().

Server. HTMLEncode () of ASP ().

Server. HtmlEncode () of ASP. NET or a more powerful Microsoft Anti-Cross Site Scripting Library

Java xssprotect (Open Source Library ).

Node-validator of node. js.