xss 防范

https://www.npmjs.com/package/xss

 

xss的案例：

https://portswigger.net/web-security/cross-site-scripting/cheat-sheet#onerror

 

https://xss.haozi.me/#/0x00