nodejs-rigorous/src/helpers/h_secure_user_input.js

Rigorous Framework

const { RigorousError, errorTypes } = require('../factory/RigorousError/index');

function secureInput(unitTextRaw, optional = true) {

    const map = {
        '&': '&',
        '<': '&lt;',
        '>': '&gt;',
        '"': '&#039;', // " = &quot"
        "'": '&#039;', // ' = &#039
    };

    if (!unitTextRaw) {
        
        if (optional) {

            throw new RigorousError('Undefined param input'); 
        } else {

            return null;
        }
    }

    return unitTextRaw.replace(/[&<>"']/g, (m) => { return map[m]; });

}
module.exports = {
    
    escapeHtml: (unitTextRaw, optional = true) => {

        let result = null;

        if (Array.isArray(unitTextRaw)) {

            result = [];
            
            unitTextRaw.forEach((input) => {

                result.push(secureInput(input, optional));
            });

        } else {

            result = secureInput(unitTextRaw, optional);
        }

        return result;
    },
};