A fast, native Bun-powered HTML sanitizer with DOMPurify-like features. Protection against XSS and malicious content.

Express 4.x and 5.x middleware which sanitizes user input data (in req.body, req.query, req.headers and req.params) to prevent Cross Site Scripting (XSS) attack.

PromptShield sanitizer that applies safe, deterministic fixes to text based on detected prompt-injection threats such as invisible characters, markdown smuggling, and BOM artifacts.

A JavaScript/TypeScript utility to sanitize filenames for S3 and general use

Express middleware for the sanitizer module.

A simple utility to sanitize a string according to ArcGIS supported HTML specification.

An intuitive & tiny string sanitizer to remove any special characters or convert strings to create filename or url 🎉🎉

A CSS sanitizer to prevent XSS attacks

sanitizer for markdown-it.

Defend an agent against hidden-content injection: strip payload-capable invisible Unicode and ANSI, splice out human-invisible HTML, and flag data-exfil URLs in untrusted text before any model sees it.

a complete package to control user input data to prevent Cross Site Scripting (XSS) ,Sql injection and no Sql injection attack

Caja's HTML Sanitizer as a Node.js module

Plugin for Logrocket to mask request/response bodies by designated field names

Decorator based class property sanitation in Typescript.

Clean up user-submitted HTML, preserving allowlisted elements and allowlisted attributes on a per-element basis

Express JS middleware to cleanup/sanitize json request body in express

Sanitize out invalid xml characters from your strings

Node wrapper for the Google Caja HTML/CSS sanitizer

Class-based sanitization in TypeScript using decorators

Zero-dependency, DOM-free, pure predicate for detecting unsafe strings across HTML, XML, SVG, SQL, SHELL, and REGEX contexts