'use strict'; module.exports = function isValidXss(requestURL) { var xssRegex = /(\b)(on\w+)=|javascript|(<\s*)(\/*)script/gi; return xssRegex.test(requestURL); };