Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist

Middleware to disable the X-XSS-Protection header

Zero-dependency, DOM-free, pure predicate for detecting unsafe strings across HTML, XML, SVG, SQL, SHELL, and REGEX contexts

A simple utility to sanitize a string according to ArcGIS supported HTML specification.

Secure XSS Filters - Just sufficient output filtering to prevent XSS!

Strict URL sanitization with security-focused validation

Validates XSS related issues of mixing HTML and non-HTML content in variables.

Express 4.x and 5.x middleware which sanitizes user input data (in req.body, req.query, req.headers and req.params) to prevent Cross Site Scripting (XSS) attack.

XSS filter extension for showdown

React component to render markdown

micromark extension to support GFM tagfilter

Gets the job done when JSON.stringify can't

GraphQL IDE for better development workflows (GraphQL Subscriptions, interactive docs & collaboration).

Gets the job done when JSON.stringify can't

Safe builders for Trusted Types values

GraphQL IDE for better development workflows (GraphQL Subscriptions, interactive docs & collaboration).

TypeScript definitions for xss-filters

hint that that checks if HTML document only response headers are sent for other resources

Utility kit for a safe string encoding/decoding

Check if a string is HTML