node 解决存储xss风险报告

npm install xss

const xss = require("xss");

// 在项目的接口里面添加

let option = {
        stripIgnoreTag: true,  // 把所有标签替换为空(去掉不在白名单上的标签)

    }
　　// 删除默认的div标签
    delete xss.whiteList['div']

let count = xss(params.Content, option);

var xss = require("xss");
var html = xss('<script>alert("xss");</script>');
console.log(html);