ESLint plugin for browser security — detects DOM XSS, postMessage abuse, tokens in localStorage, insecure cookies, clickjacking, mixed content, and CSP gaps.

Elegant, Fast JavaScript static security analyzer for finding issues like DOM XSS.

Retrofit Trusted Types onto a legacy page: claim the realm's default policy so old DOM-XSS sinks get sanitized without touching the code.

Zero-dependency, DOM-free, pure predicate for detecting unsafe strings across HTML, XML, SVG, SQL, SHELL, and REGEX contexts

A Reflected / Stored / DOM XSS Scanner based on Headless Chrome Node API via Puppeteer

Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist

Safe builders for Trusted Types values

A simple utility to sanitize a string according to ArcGIS supported HTML specification.

Middleware to disable the X-XSS-Protection header

Secure XSS Filters - Just sufficient output filtering to prevent XSS!

Makes it possible to use DOMPurify on server and client in the same way.

Validates XSS related issues of mixing HTML and non-HTML content in variables.

Express 4.x and 5.x middleware which sanitizes user input data (in req.body, req.query, req.headers and req.params) to prevent Cross Site Scripting (XSS) attack.

Strict URL sanitization with security-focused validation

ESLint plugin with rules for detecting DOM XSS and client-side security issues

GraphQL IDE for better development workflows (GraphQL Subscriptions, interactive docs & collaboration).

XSS filter extension for showdown

Floating UI for React DOM

Simple and complete DOM testing utilities that encourage good testing practices.

Implements https://w3c.github.io/accname/