node防xss攻擊插件

var xss = require('node-xss').clean;
router.post("/orders/insert-orders", function (req, res) {
    //對請求體做xss過濾
    var data = xss(req.body);
    var url = urlMap.englishlistenspeakserver + '/orders/insert-orders';
    var options = {
        url: url,
        method: 'POST',
        json: true,
        qs: data
    };
    request(options, function (error, response, body) {
        res.send(body);
    })
});