Express JS middleware to cleanup/sanitize json request body in express

A CSS sanitizer to prevent XSS attacks

Lightning Web Security HTML and SVG sanitization utilities

A polyfill for the Sanitizer API with various sanitizer configs

An express middleware inspired from express-sanitizer but additionally sanitizes URL params. It also gives an option to provide a preprocessor function to decide whether a (key, value) pair should be sanitized or not.

Class-based sanitization in TypeScript using decorators

Node wrapper for the Google Caja HTML/CSS sanitizer

TypeScript definitions for express-xss-sanitizer

A string manipulation toolbox, featuring a string formatter (inspired by sprintf), a variable inspector (output featuring ANSI colors and HTML) and various escape functions (shell argument, regexp, html, etc).

Zero-dependency, DOM-free, pure predicate for detecting unsafe strings across HTML, XML, SVG, SQL, SHELL, and REGEX contexts

Makes it possible to use DOMPurify on server and client in the same way.

Zero-dependency, isomorphic HTML sanitizer: a fast browser-faithful WHATWG engine (deny-by-default) plus a drop-in sanitize-html-compatible legacy engine.

A simple lightweight npm package for sanitizing paths to prevent Path Traversal

HTML tag sanitizer for marked

Comprehensive security sanitization library for Model Context Protocol (MCP) servers with trusted security libraries

Inclusive Angular API for DOMPurify

An Express.js middleware to prevent NoSQL injection attacks by sanitizing req.body, req.query, and req.params. Supports custom replacement and dot notation handling

A script that resets the resolves registry URLs in package lock to the official NPM registry.

Sanitites payloads based on given field definitions

Sanitize your express payload to prevent MongoDB operator injection.