Use DOMPurify on server and client in the same way

Make it safe to serve untrusted SVG files

✈️ An enterprise level Flight Booking System for Turkish Airlines (web-application) based on the Model View Controller (MVC) Architecture made using Java Servlets, Java Server Pages (JSPs). Moreover authentication and authorization for users is implemented. The web-application is also secured against SQL Injection and Cross-Site Scripting attacks.

a library for performing fast, configurable cleansing of HTML coming from untrusted sources

A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF

this repository is a docker containing some "XSS vulnerability" challenges and bypass examples.

Light weight library for Filter the Cross-site scripting in request For Spring Framwork / Spring-Boot, logic can be use for servlet based(without using spring framework) application

XSSB is a proactive DOM sanitizer, defending against client-side injection attacks!

Contraband filtering reverse proxy for plain http and SSL.

Crystal library for transforming HTML/XML trees to sanitize HTML from untrusted sources

⚡️ Voltis Core: A PHP framework based on Swoole from the ground up

Simple PHP sanitization class used to verify and clean values to assure they are valid and secure

XSS Filter to properly clean your request data from XSS related attacks.

xss-filter-bypass

🛑 Java Xss filtering library

A Laravel middleware to cleaning all inputs/data of request from XSS and embed elements

A powerful middleware for securing your express.js applications against cross-site scripting (XSS) attacks

MiniGreX will be designed with security in mind, and the code will be written to minimize the risk of SQL injection attacks and other security vulnerabilities. To ensure maximum security, we recommend keeping the CMS up-to-date with the latest security patches and using strong passwords for all user accounts.

An ongoing curated collection of awesome XSS software, libraries, frameworks, learning tutorials & practical resources cross-site scripting.

XSS Bypass techniquies