Prevention of XSS attack

[patil.g...@gmail.com]

HI

I am looking for solution to encode all inputs which contains HTML/Js tags before save into Couch db. Is there any option is EKTORP to apply that filter?

[Steve Torres]

You can Base64encode your string before saving to couch and decode it after reading

Base64.encodeBase64String(html.getBytes());

Where html variable is the string to encode.

[patil.g...@gmail.com]

Thank you for your reply.

Isn't there a single point where I can apply above encoding before saving into DB? 

Do I need to apply above encoding for each and every field which I am persisting into Couch?