EJS

EJS - Embedded JavaScript templating#

EJS is a simple templating language that lets you generate HTML markup with plain JavaScript.

XSS#

Unsafe:

<h1><%- user.name %></h1>

Safe:

<h1><%= user.name %></h1>