{"_id":"express-caja-sanitizer","_rev":"7-7886f75a7844074b406ab72080d184d6","name":"express-caja-sanitizer","description":"An express middleware inspired from express-sanitizer but additionally sanitizes URL params. It also gives an option to provide a preprocessor function to decide whether a (key, value) pair should be sanitized or not.","dist-tags":{"latest":"1.0.1"},"versions":{"1.0.0":{"name":"express-caja-sanitizer","description":"An express middleware inspired from express-sanitizer which sanitizes URL params too. It also provides options to sanitize keys and a preprocessor function to exempt a few values from sanitizing.","author":{"name":"Srivathsa Pasumarthi","email":"pv.srivathsa@gmail.com"},"version":"1.0.0","homepage":"https://github.com/pvsrivathsa/express-caja-sanitizer","repository":{"type":"git","url":"git://github.com/pvsrivathsa/express-caja-sanitizer.git"},"license":"MIT","main":"./index.js","scripts":{"test":"istanbul cover node_modules/.bin/jasmine-node -- --forceexit tests/"},"engines":{"node":"*"},"dependencies":{"sanitizer":"0.1.2","lodash":"3.10.1"},"devDependencies":{"istanbul":"0.3.22","jasmine-node":"1.14.5"},"keywords":["express","express middleware","sanitize","sanitization","xss"],"bugs":{"url":"https://github.com/pvsrivathsa/express-caja-sanitizer/issues"},"_from":".","directories":{"test":"tests"},"gitHead":"0d776a06aa4ba8f9bd34e9416f45b387f6e99330","_id":"express-caja-sanitizer@1.0.0","_shasum":"fe7d3183b91ee7cbbd7cf5902399c05a0e50ab24","_npmVersion":"2.5.1","_nodeVersion":"0.12.0","_npmUser":{"name":"pvsrivathsa","email":"pv.srivathsa@gmail.com"},"dist":{"shasum":"fe7d3183b91ee7cbbd7cf5902399c05a0e50ab24","tarball":"https://registry.npmjs.org/express-caja-sanitizer/-/express-caja-sanitizer-1.0.0.tgz","integrity":"sha512-NsBkUgRY7P0dd4TI4YJcFPFg5Y9LPMo9TWOqpFJNDOBlym/HIYEa+BsHpr0lCdix5BWPWmb1E5oRli8ZFeebtA==","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEQCIE/+426RE5y4akkjq0OgD8UIGO+NIIJmXnaksqQrl/W7AiAOnVVEi3oFrCPUEvHF9xhBZF/qeKNJ5IsD+CXYsfhDbA=="}]},"maintainers":[{"name":"pvsrivathsa","email":"pv.srivathsa@gmail.com"}]},"1.0.1":{"name":"express-caja-sanitizer","description":"An express middleware inspired from express-sanitizer but additionally sanitizes URL params. It also gives an option to provide a preprocessor function to decide whether a (key, value) pair should be sanitized or not.","author":{"name":"Srivathsa Pasumarthi","email":"pv.srivathsa@gmail.com"},"version":"1.0.1","homepage":"https://github.com/pvsrivathsa/express-caja-sanitizer","repository":{"type":"git","url":"git://github.com/pvsrivathsa/express-caja-sanitizer.git"},"license":"MIT","main":"./index.js","scripts":{"test":"istanbul cover node_modules/.bin/jasmine-node -- --forceexit tests/"},"engines":{"node":"*"},"dependencies":{"sanitizer":"0.1.2","lodash":"3.10.1"},"devDependencies":{"istanbul":"0.3.22","jasmine-node":"1.14.5"},"keywords":["express","express middleware","sanitize","sanitization","xss"],"bugs":{"url":"https://github.com/pvsrivathsa/express-caja-sanitizer/issues"},"_from":".","directories":{"test":"tests"},"gitHead":"d96c01ad9f7591f8d3ba77e69f0085f88d600b80","_id":"express-caja-sanitizer@1.0.1","_shasum":"207985cfb60b880f2bf9fcbe4719b625239ab432","_npmVersion":"2.5.1","_nodeVersion":"0.12.0","_npmUser":{"name":"pvsrivathsa","email":"pv.srivathsa@gmail.com"},"dist":{"shasum":"207985cfb60b880f2bf9fcbe4719b625239ab432","tarball":"https://registry.npmjs.org/express-caja-sanitizer/-/express-caja-sanitizer-1.0.1.tgz","integrity":"sha512-ODoIFEaMUbrdq0CEXZNKq2ErX9dEN6zUA58oFcUBEjOETmIJAuwQKU52yTNBokskJhA6+xvR61c4ZnmEuEvqJw==","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIQCTGgTVPYB4LQeWFrTHlphvGm0yLRUQYsenGpop3qv7VgIgRlzuI40D4fNB19ASBmI09/qvsMi909osoXqHzNznYHs="}]},"maintainers":[{"name":"pvsrivathsa","email":"pv.srivathsa@gmail.com"}]}},"readme":"# express-caja-sanitizer\nAn express middleware inspired from express-sanitizer but additionally sanitizes URL params. It also gives an option to provide a preprocessor function to decide whether a (key, value) pair should be sanitized or not.\n\n[![Build Status](https://travis-ci.org/pvsrivathsa/express-caja-sanitizer.png)](https://travis-ci.org/pvsrivathsa/express-caja-sanitizer.png)\n\n## Installation\n```\nnpm install express-caja-sanitizer\n```\n\n## Usage\nNeeds to be called after express.bodyParser() and before anything that requires the sanitized input, e.g.:\n\n```\nvar express = require('express');\nvar bodyParser = require('body-parser');\nvar cajaSanitizer = require('express-caja-sanitizer');\n\nvar app = express();\n\napp.use(bodyParser());\napp.use(cajaSanitizer());\n\n```\n\n## URL Params\nThis module by default sanitizes the request URL params (`req.params`), apart from request body and query string params, e.g.:\n\n```\nhttp://www.myapp.com/rest/user/<script>console.log(\"hello\")</script>bob/details\n```\n\nwill be sanitized as\n\n```\nhttp://www.myapp.com/rest/user/bob/details\n```\n\n## Options\n\n#### `shouldSanitize`\nWhen `shouldSanitize` function is provided as an option, the module will sanitize only the (key, value) pairs for which the function returns `true`.\n\nFor example, if we don't want to sanitize XML values then the preprocesser function can be\n\n```\nvar shouldSanitize = function(key, value) {\n  return !value.startsWith('<?xml version=\"1.0\"')\n}\n```\n\n##Limitations\nThis is a basic implementation of [Caja-HTML-Sanitizer](https://github.com/theSmaw/Caja-HTML-Sanitizer) with the specific purpose of mitigating against persistent XSS risks.\n\n##Caveats\nThis module trusts the dependencies to provide basic persistent XSS risk mitigation. A user of this package should review all packages and make their own decision on security and fitness for purpose.","maintainers":[{"name":"pvsrivathsa","email":"pv.srivathsa@gmail.com"}],"time":{"modified":"2022-06-17T22:11:37.851Z","created":"2015-10-15T10:42:25.061Z","1.0.0":"2015-10-15T10:42:25.061Z","1.0.1":"2015-10-15T10:49:06.377Z"},"homepage":"https://github.com/pvsrivathsa/express-caja-sanitizer","keywords":["express","express middleware","sanitize","sanitization","xss"],"repository":{"type":"git","url":"git://github.com/pvsrivathsa/express-caja-sanitizer.git"},"author":{"name":"Srivathsa Pasumarthi","email":"pv.srivathsa@gmail.com"},"bugs":{"url":"https://github.com/pvsrivathsa/express-caja-sanitizer/issues"},"license":"MIT","readmeFilename":"README.md","users":{"pvsrivathsa":true,"overcast":true}}