Prevent xss and sql injection: JS special character filtering regular_javascript skills

Copy code The code is as follows:

function stripscript(s)
{
var pattern = new RegExp("[%--`~!@#$^&*()=|{}':;',\[\].<>/?~!@#￥……&*() ——|{}【】';:""'. ,,? ]") //Format RegExp("[Special filter characters defined in the middle]")
var rs = "";
for ( var i = 0; i < s.length; i ) {
rs = rs s.substr(i, 1).replace(pattern, '');
}
return rs;
}