DocsSecuritySanitizationSecuritySanitizationHTML escaping to prevent XSS.1 min readDocumentationEdit this pageUsage# typescriptimport { sanitize } from '@axiljs/security' app.use(sanitize()) Escapes <script> to <script> and similar HTML characters in request body and query params. typescriptimport { escapeHtml } from '@axiljs/security' const safe = escapeHtml(userInput)PreviousCSRFNextORM Overview