Escape
An API for escaping different kind of queries.
About Escape
Escape is an API that escapes user-supplied strings for safe use in different contexts, with three methods: html (HTML escaping to prevent XSS), shell (UNIX Bourne shell escaping to prevent OS command injection), and path (UNIX path escaping to prevent directory traversal). It exposes these methods over HTTP, accepting a method and data parameter and returning a JSON response with an ok flag and the escaped data string.
It is aimed at developers who need to sanitize untrusted input before rendering it in HTML, passing it to shell commands, or using it in file paths, without implementing the escaping logic themselves. The project is a small, single-file (main.rb) open-source repository.
Key features
- Escapes HTML strings to prevent XSS
- Escapes UNIX shell strings to prevent OS command injection
- Escapes UNIX path strings to prevent directory traversal
- Accessible via simple HTTP GET API calls with method and data parameters
Frequently asked questions
What does this API do?
It escapes HTML, shell, and path query strings to help prevent XSS, OS command injection, and directory traversal attacks.
How do you call the API?
You send a GET request with a method parameter (html, shell, or path) and a data parameter containing the string to escape.
What format does the API return?
It returns a JSON object with an ok boolean and a data field containing the escaped string.
Is this hosted somewhere I can use directly?
Yes, a hosted instance is available at s.polarspetroll.repl.co.
Show your product to thousands of developers
· 100k monthly pageviews
· 7k newsletter subscribers
You might also like
Complete Criminal Checks
SecurityProvides data of offenders from all U.S. States and Puerto Rico.
CRXcavator
SecurityChrome extension risk scoring.
EmailRep
SecurityEmail address threat and risk prediction.
FilterLists
SecurityLists of filters for adblockers and firewalls.
FingerprintJS Pro
SecurityFraud detection API offering highly accurate browser fingerprinting.
FraudLabs Pro
SecurityScreen order information using AI to detect frauds.
