don't include characters

[John Livermore]

I have a form that enables the user to input freeform text. I want to
try to stop javascript and html injection attacks, so I want to allow
all characters except for <>{}. What is the regular expression syntax
that would allow all characters except for those?

Thanks,
John

 

[Evertjan.]

John Livermore wrote on 04 aug 2003 in comp.lang.javascript:

I have a form that enables the user to input freeform text. I want to
try to stop javascript and html injection attacks, so I want to allow
all characters except for <>{}. What is the regular expression syntax
that would allow all characters except for those?

s=s.replace(/[<>\{\}]+/g,'')