Escape

About Escape

Escape is an API that escapes user-supplied strings for safe use in different contexts, with three methods: html (HTML escaping to prevent XSS), shell (UNIX Bourne shell escaping to prevent OS command injection), and path (UNIX path escaping to prevent directory traversal). It exposes these methods over HTTP, accepting a method and data parameter and returning a JSON response with an ok flag and the escaped data string.

It is aimed at developers who need to sanitize untrusted input before rendering it in HTML, passing it to shell commands, or using it in file paths, without implementing the escaping logic themselves. The project is a small, single-file (main.rb) open-source repository.

Key features

• Escapes HTML strings to prevent XSS
• Escapes UNIX shell strings to prevent OS command injection
• Escapes UNIX path strings to prevent directory traversal
• Accessible via simple HTTP GET API calls with method and data parameters

Frequently asked questions