用于捕获客户端攻击的正则表达式模式

I need to prevent any of client side javascript attacts(xss,csrf), how can i validate an expression with preg_match in php? Is there any regular expression patterns for catching client side attacks? Or is there other recommended ways to do this?I need to prevent any of client side javascript