Evaluate Content Security Policies for a wide range of bypasses and weaknesses

A utility package to help implement stateless CSRF protection using the Double Submit Cookie Pattern in express.

🛡️ Security Module for Nuxt based on HTTP Headers and Middleware

Convert Sarif format to body text

No description provided.

An ESLint plugin that restricts the use of formatSelection and formatResult to prevent potential issues when passed into select2() as initialization options. This proactive measure helps avoid Cross-Site Scripting (XSS) vulnerabilities and other unintende

This module Sanitizes HTML input, stripping all tags and attributes that aren't whitelisted.HTML sanitization can be used to protect against cross-site scripting (XSS) attacks by sanitizing any HTML code submitted by a user.

Content Security Policy middleware

Cross platform child_process#spawn and child_process#spawnSync

Secure Request Encoder is a middleware package for Node.js and Express.js that enhances the security of your web application by encoding potentially unsafe characters in HTTP request bodies. It helps prevent cross-site scripting (XSS) attacks by sanitizin

Use a nonce for the script-src and style-src directives of your Content Security Policy.

CSP-compliant interpreter for Vega expressions.

hint for best practices related to the usage of the Strict-Transport-Security response header

Express 4.x middleware which sanitizes user input data (in req.body, req.query, req.headers and req.params) to prevent Cross Site Scripting (XSS) attack.

Set the X-Permitted-Cross-Domain-Policies header in Express apps

Here's the scenario: You want to build a secure means of some untrusted site opening a window, which loads content at a trusted site. Then you want the untrusted dude to be able to pass in parameters. Then you want the trusted code to do any amount of

jVectorMap is a vector-based, cross-browser and cross-platform component for interactive geography-related data visualization on the web. It provides numerious features like smooth zooming and panning, fully-customizable styling, markers, labels and toolt

IMMUNIO protects your web app from security vulnerabilities by monitoring requests in realtime. After a two minute installation, your application will be protected from many of the top classes of attacks, including Cross-Site Scripting (XSS), SQL Injectio

Universal WHATWG Fetch API for Node, Browsers and React Native

hint that that checks using Snyk for vulnerable JavaScript libraries