update: JS/Node.js libs in Rule 6

jurbz2019 · May 9, 2019 · d2ffa87 · d2ffa87
1 parent 90edc2c
commit d2ffa87
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md b/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md
@@ -341,7 +341,8 @@ The `SanitizeHelper` module provides a set of methods for scrubbing text of unde
 **Other libraries that provide HTML Sanitization include:**
 - [HTML sanitizer](https://github.com/google/closure-library/tree/master/closure/goog/html/sanitizer) from [Google Closure Library](https://developers.google.com/closure/library/)
 - [PHP HTML Purifier](http://htmlpurifier.org/).
-- [JavaScript/Node.js Bleach](https://github.com/ecto/bleach).
+- [JavaScript (DOM-only, requires JSDOM for Node.js)](https://github.com/cure53/DOMPurify).
+- [Node.js (depends on htmlparser2)](https://github.com/punkave/sanitize-html).
 - [Python Bleach](https://pypi.python.org/pypi/bleach).
 
 ## RULE \#7 - Avoid JavaScript URL's