google-caja
Node wrapper for the Google Caja HTML/CSS sanitizer
disinfect
Request query, payload, and params sanitization
express-autosanitizer
automatic sanitization of req body fields, params and query. uses caja. automatically does sanitization and escaping as middleware.