node防xss攻击插件,用于富文本过滤脚本

'use strict';
let xss = require('node-xss').clean;

let html = "<script>alert('弹弹弹')</script><p>123</p>";
(() => {
    let params = xss(html);

    console.log(params); // [removed]alert&#40;'弹弹弹'&#41;[removed]<p>123</p>
})();