npm
cure53/DOMPurify
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
Apache-2.0Aug 4, 2026 · metrics 2.10.0
All tags
Catalogue tag
#xss
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
25 records
npm
asamassekou10/ship-safe
CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.
MITSep 6, 2026 · metrics 2.10.0
Packagist
nette/latte
☕ Latte: the safest & truly intuitive templates for PHP. Engine for those who want the most secure PHP sites.
Custom licenseSep 5, 2026 · metrics 2.10.0
npm
humanspeak/svelte-markdown
📝 Markdown and HTML renderer for Svelte 5 — built for streaming AI agent output from Claude Code, ChatGPT, and agentic workflows. XSS-safe defaults, token caching, TypeScript types.
MITJul 17, 2026 · metrics 2.10.0
npm
kkomelin/isomorphic-dompurify
Use DOMPurify on server and client in the same way
MITAug 27, 2026 · metrics 2.10.0
crates.io
rust-ammonia/ammonia
Repair and secure untrusted HTML
Apache-2.0Jul 22, 2026 · metrics 2.10.0
Packagist
voku/anti-xss
㊙️ AntiXSS | Protection against Cross-site scripting (XSS) via PHP
MITJul 30, 2026 · metrics 2.10.0
crates.io
cloudflare/svg-hush
Make it safe to serve untrusted SVG files
MITAug 9, 2026 · metrics 2.10.0
crates.io
kerberosmansour/SunLitSecurityLibraries
SunLit Security Libraries: Rust security crates for OWASP-aligned services
Custom licenseJul 30, 2026 · metrics 2.10.0
—
mganss/HtmlSanitizer
Cleans HTML to avoid XSS attacks
MITJul 18, 2026 · metrics 2.10.0
Packagist
paragonie/csp-builder
Build Content-Security-Policy headers from a JSON file (or build them programmatically)
MITAug 18, 2026 · metrics 2.10.0
Packagist
interactivetools-com/SmartString
PHP strings that HTML-encode themselves on echo, interpolation, and concatenation. XSS-safe by default and at least 3x faster than calling htmlspecialchars() yourself.
MITSep 5, 2026 · metrics 2.10.0
Packagist
interactivetools-com/ZenDB
PHP/MySQL database layer where values only enter SQL through placeholders and every result HTML-encodes itself on output. Faster than prepared statements plus htmlspecialchars() on every measured page, within microseconds of raw SQL.
MITAug 12, 2026 · metrics 2.10.0
Packagist
TYPO3/html-sanitizer
HTML sanitizer, written in PHP, aiming to provide XSS-safe markup based on explicitly allowed tags, attributes and values.
MITJul 22, 2026 · metrics 2.10.0
npm
leizongmin/js-xss
Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
Custom licenseAug 12, 2026 · metrics 2.10.0
npm
micromark/micromark-extension-gfm-tagfilter
micromark extension to support GFM tagfilter
MITAug 22, 2026 · metrics 2.10.0
npm
3516634930/Payloader
渗透测试Payload速查平台 | Pentest Payload Quick Reference | XSS/SQLi/SSRF/RCE | React+TypeScript
AGPL-3.0Jul 19, 2026 · metrics 2.10.0
npm
NaturalIntelligence/is-unsafe
Zero-dependency, DOM-free, pure predicate for detecting unsafe strings across HTML, XML, SVG, SQL, SHELL, NOSQL, and REGEX contexts
MITAug 27, 2026 · metrics 2.10.0
npm
yuda-lyu/wsemi
A support package for web developer.
MITJul 19, 2026 · metrics 2.10.0
Packagist
interactivetools-com/SmartArray
Enhanced Arrays with Chainable Methods and Automatic HTML Encoding
MITJul 16, 2026 · metrics 2.10.0
NuGet
Vereyon/HtmlRuleSanitizer
A rule based HTML sanitizer built on top of the HTML Agility pack
MITAug 2, 2026 · metrics 2.10.0
Go
taq25/templ-lint
Security linter for a-h/templ: detects XSS-prone htmx / Alpine.js usage by parsing .templ files directly with parser/v2
MITJul 17, 2026 · metrics 2.10.0
Go
microcosm-cc/bluemonday
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
BSD-3-ClauseJul 30, 2026 · metrics 2.10.0
PyPI
wntrblm/flask-talisman
HTTP security headers for Flask
Apache-2.0Aug 27, 2026 · metrics 2.10.0
NuGet
security-code-scan/security-code-scan
Vulnerability Patterns Detector for C# and VB.NET
LGPL-3.0Aug 27, 2026 · metrics 2.10.0