google-caja-sanitizer

Node wrapper for caja sanitizer for html/css including data-* attributes

express-autosanitizer

automatic sanitization of req body fields, params and query. uses caja. automatically does sanitization and escaping as middleware.