DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
-
Updated
Sep 26, 2026 - JavaScript
Sanitizing is a process to check and remove harmful data from user input. It prevents XSS (Cross Site Scripting) attacks.
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
This repository is a collection of JavaScript gadgets that can be used to bypass XSS mitigations such as Content Security Policy (CSP) and HTML sanitizers like DOMPurify.
Express 4.x and 5.x middleware which sanitizes user input data (in req.body, req.query, req.headers and req.params) to prevent Cross Site Scripting (XSS) attack.
Biblioteca para realizar a limpeza de dados em objetos e arrays de forma simplificada.
A collection of secure & minimal parsers for HTML, CSS, SVG, MathML, XML, and JSON
Isomorphic library for recursive manipulation of live WHATWG DOMs.
🚥 Koa middleware to validate and sanitize HTTP request
Visual HTML page editor that renders real HTML and CSS with browser-accurate fidelity inside an isolated iframe canvas
Scripts for testing HTML sanitizers
AgnosticHTML: A utility function that safely parses HTML strings into DOM nodes, avoiding the use of innerHTML for security reasons.
Sanitize Express request body, query, param, headers
Sanitizer API polyfill & config
sanitizer express request based on mongoose schema tree
Modern React Todo List app