Paul Armstrong • 12/22/2020

Safe Express.js HTML responses without a templating engine

This technical article discusses the common use of templating engines in Express.js for safe HTML rendering and preventing Cross-Site Scripting (XSS). It argues that a full templating engine may be unnecessary and demonstrates a simpler, safer approach using native JavaScript techniques to escape user input and build HTML responses directly, comparing it to engines like Handlebars and EJS.

0 comments

#security #server-side rendering #expressjs