Skip to main content

​
Function: validateUserInput()

validateUserInput(input, maxLength?, allowHtml?): string
Defined in: sanitize.ts:315 Validates and sanitizes generic user input by trimming, removing HTML tags (unless allowed), normalizing whitespace, and removing dangerous patterns to prevent XSS and basic injection flaws.

​
Parameters

​
input

string User input to validate and sanitize.

​
maxLength?

number = 500 Maximum allowed input length. Excess will be truncated.

​
allowHtml?

boolean = false If true, HTML tags are preserved; otherwise, all tags are stripped.

​
Returns

string Sanitized input string with length at most maxLength.

​
Compliance

NIST 800-53 SI-10 (Information Input Validation)

​
Example

validateUserInput('<p>Hello!</p>', 50); // "Hello!"
validateUserInput('<script>alert(1)</script>test', 100); // "test"