DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
-
Updated
Jan 30, 2025 - JavaScript
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
xss-payload-list
A cross site scripting command and control notification server
🐞 Understand how cross-site scripting occurs, how to detect and exploit XSS vulnerabilities, giving you control of other visitor's browsers.
👻 JavaScript basics for beginners and cybersecurity enthusiatsts. Learn the high-level, multi-paradigm language of the web.
quickly detects OWASP top 10 vulnerabilities in your current tab
Given some data, js-char-escape returns a stringified representation of that data to help prevent XSS/ Cross-site_Scripting Attacks in your application). js-char-escape is a fork of jsesc with a few additions such as exclude & excludeAccented.
I improved my previous "JavaScript Share My Place" app so that I can protect it from security holes and concepts. I specifically handled the two most important JavaScript attack patterns or vulnerabilities, which are Security Details in my code exposed accidentally and Cross Site Scripting (XSS) attacks, with Sanitize HTML package for example.
AgnosticHTML: A utility function that safely parses HTML strings into DOM nodes, avoiding the use of innerHTML for security reasons.
Create canvas fingerprints for your browser ☝.
Tourist Review webiste ,a web application project with the functionality which includes map ,authentication ,login/signup and many more features with security.
In this video I covered how to perform cross site scripting (XSS), which basically allows attackers to have full control over a vulnerable website 😈. Just like always, this video is for educational purposes. If you do any illegal stuff you will get arrested 🚓!
Cross Site Scripting (XSS) attack demo
Presentation with reveal.js about xss
Google Chrome extension to detect and prevent Reflected XSS via special crafted URLs
Express with XSS in environment variable
Node.js HTTP CORS middleware.
Add a description, image, and links to the cross-site-scripting topic page so that developers can more easily learn about it.
To associate your repository with the cross-site-scripting topic, visit your repo's landing page and select "manage topics."