Apply handle data after client input

Hello.

My case is i have 2 form, 2 datatable with 10 input field each. So mean total 40 field.
I want apply to all 40 field, when i input something, it will prevent html tag (XSS).

QUESTION:

  • How to apply all 40 field to prevent XSS ? For view “form” and “datatable” ?

multiple solutions, but you didn’t provide any snippet …

  1. htmlentities your api responses server side
  2. use datastore, make a webix proxy and htmlentities the api response
  3. use template when possible (datatable) “see safe XSS template” in the doc