A polyfill for the Sanitizer API with various sanitizer configs

A zero-dependency, SSR-safe HTML sanitizer following the W3C Sanitizer API spec

A fast, native Bun-powered HTML sanitizer with DOMPurify-like features. Protection against XSS and malicious content.

Express middleware for the sanitizer module.

A simple utility to sanitize a string according to ArcGIS supported HTML specification.

Defend an agent against hidden-content injection: strip payload-capable invisible Unicode and ANSI, splice out human-invisible HTML, and flag data-exfil URLs in untrusted text before any model sees it.

Express 4.x and 5.x middleware which sanitizes user input data (in req.body, req.query, req.headers and req.params) to prevent Cross Site Scripting (XSS) attack.

Plugin for Logrocket to mask request/response bodies by designated field names

Caja's HTML Sanitizer as a Node.js module

PromptShield sanitizer that applies safe, deterministic fixes to text based on detected prompt-injection threats such as invisible characters, markdown smuggling, and BOM artifacts.

Sanitize out invalid xml characters from your strings

URL sanitizer for Node.js, browsers and web sites.

A CSS sanitizer to prevent XSS attacks

Decorator based class property sanitation in Typescript.

An intuitive & tiny string sanitizer to remove any special characters or convert strings to create filename or url 🎉🎉

sanitizer for markdown-it.

a complete package to control user input data to prevent Cross Site Scripting (XSS) ,Sql injection and no Sql injection attack

A JavaScript/TypeScript utility to sanitize filenames for S3 and general use

An express middleware inspired from express-sanitizer but additionally sanitizes URL params. It also gives an option to provide a preprocessor function to decide whether a (key, value) pair should be sanitized or not.

Express JS middleware to cleanup/sanitize json request body in express