TypeScript definitions for express-xss-sanitizer

Express 4.x and 5.x middleware which sanitizes user input data (in req.body, req.query, req.headers and req.params) to prevent Cross Site Scripting (XSS) attack.

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It runs as JavaScript and works in all modern browsers, as well as in Node.js (via jsdom). DOMPurify is written by security people who have vast background in web a

Utility library for escaping and unescaping HTML entities

A simple utility to sanitize a string according to ArcGIS supported HTML specification.

Express 4.x middleware which sanitizes user input data (in req.body, req.query, req.headers and req.params) to prevent Cross Site Scripting (XSS) attack.

A fast, native Bun-powered HTML sanitizer with DOMPurify-like features. Protection against XSS and malicious content.

Zero-dependency, DOM-free, pure predicate for detecting unsafe strings across HTML, XML, SVG, SQL, SHELL, and REGEX contexts

Koa middleware which sanitizes user input data (in req.body, req.query, req.headers and req.params) to prevent Cross Site Scripting (XSS) attack.

A powerful and flexible input sanitizer for Zod schemas, designed to prevent XSS (Cross-Site Scripting) attacks. Easily sanitize or validate user input in your Zod schemas with customizable options.

Express middleware for the sanitizer module.

Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist

a complete package to control user input data to prevent Cross Site Scripting (XSS) ,Sql injection and no Sql injection attack

Makes it possible to use DOMPurify on server and client in the same way.

A CSS sanitizer to prevent XSS attacks

Middleware to disable the X-XSS-Protection header

URL sanitizer for Node.js, browsers and web sites.

Secure XSS Filters - Just sufficient output filtering to prevent XSS!

Client-side (browser-based) HTML sanitizer for front end

PromptShield sanitizer that applies safe, deterministic fixes to text based on detected prompt-injection threats such as invisible characters, markdown smuggling, and BOM artifacts.