Nodejs xss sanitizer