davidvandertuijn / laravel-json-escape

Laravel 过滤 JSON 响应以防御 XSS

2.0 2023-01-08 09:28 UTC

Requires

Requires (Dev)

None

Suggests

None

Provides

None

Conflicts

None

Replaces

None

MIT 30524d5f61146264aa6722b2f500fd8400b81e58

This package is auto-updated.

Last update: 2024-09-29 13:19:21 UTC

README

“Laravel JSON Escape” 工具旨在通过过滤潜在的跨站脚本（XSS）漏洞来增强 Laravel 应用程序生成的 JSON 响应的安全性。对于旨在保护其应用程序免受恶意攻击并确保安全数据传输的开发者来说，这种功能至关重要。

composer require davidvandertuijn/laravel-json-escape

return response()->json_escape([
    "text" => "<p>Hello World</p>"
]);

{"text":"Hello World"}

排除

return response()->json_escape([
    "text" => "Hello World",
    "html" => "<p>Hello World</p>"
], [
    "html"
]);

{"text":"Hello World","html":"<p>Hello World</p>"}