10 Best JavaScript XSS Sanitizer Libraries

List hand-picked by Openbase Experts
Learn More

dompurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

License: (MPL-2.0 OR Apache-2.0)

TypeScript Definitions: DefinitelyTyped

Bundle Size (min+gzip)

N/A

Tree-Shakeable

sanitize-html

Clean up user-submitted HTML, preserving whitelisted elements and whitelisted attributes on a per-element basis. Built on htmlparser2 for speed and tolerance

License: MIT

TypeScript Definitions: DefinitelyTyped

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

xss

Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist

License: MIT

TypeScript Definitions: Built-In

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

express-validator

An express.js middleware for validator.js.

License: MIT

TypeScript Definitions: Built-In

11Great Documentation

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

insane

😾 Lean and configurable whitelist-oriented HTML sanitizer

License: MIT

TypeScript Definitions: DefinitelyTyped

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

express-sanitizer

An express.js middleware for node-validator

License: MIT

TypeScript Definitions: DefinitelyTyped

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

express-xss-sanitizer

Express 4.x middleware which sanitizes user input data (in req.body, req.query, req.headers and req.params) to prevent Cross Site Scripting (XSS) attack.

License: MIT

TypeScript Definitions: DefinitelyTyped

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

xss-clean

Middleware to sanitize user input

License: MIT

TypeScript Definitions: DefinitelyTyped

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

express-sanitize-escape

An express.js middleware for sanitizing all query and body parameters automatically

License: MIT

TypeScript Definitions: DefinitelyTyped

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

xss-advanced

Node.js Connect middleware to sanitize user input coming from POST body, GET queries, and url params. Works with Express

License: MIT

TypeScript Definitions: Built-In

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

express-autosanitizer

automatic sanitization of req body fields, params and query fields. uses caja. automatically does sanitization and escaping as middleware.

License: MIT

TypeScript Definitions: DefinitelyTyped

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

express-sanitized

An express.js middleware for sanitizing all query and body parameters automatically

License: MIT

TypeScript Definitions: DefinitelyTyped

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

@risingstack/protect

Proactively protect your Node.js web services

License: MIT

TypeScript Definitions: Not Found

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

express-auto-sanitize

Express middleware to auto sanitize user inputs

License: MIT

TypeScript Definitions: DefinitelyTyped

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

node-procexss

Middleware to help to prevent xss attacks in your Express/Connect apps

License: MIT

TypeScript Definitions: DefinitelyTyped

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

protecc

but most importantly, he protecc

License: MIT

TypeScript Definitions: DefinitelyTyped

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

sanitize-middleware

Connect/Express middleware that sanitizes requests to protect against cross-site scripting (XSS) and command injection attacks

License: MIT

TypeScript Definitions: DefinitelyTyped

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

scorpion4dev-express-autosanitizer

automatic sanitization of req body fields, params and query. automatically does sanitization and escaping as middleware.

License: MIT

TypeScript Definitions: DefinitelyTyped

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

express-caja-sanitizer

An express middleware inspired from express-sanitizer which sanitizes URL params too. It also provides options to sanitize keys and a preprocessor function to exempt a few values from sanitizing.

License: MIT

TypeScript Definitions: DefinitelyTyped

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

express-validate

Data validation, filtering and sanitization for express

License: Unknown

TypeScript Definitions: DefinitelyTyped

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

@aftership/express-sanitized

An express.js middleware for sanitizing all query and body parameters automatically

License: MIT

TypeScript Definitions: Not Found

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

express-route-sanitizer-middleware

A sanitizer for GET and POST requests payloads

License: ISC

TypeScript Definitions: DefinitelyTyped

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

xss-req-sanitizer

Middleware to sanitize http requests

License: MIT

TypeScript Definitions: DefinitelyTyped

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

express-secure-handlebars

Express with Secure Handlebars

License: BSD-2-Clause

TypeScript Definitions: DefinitelyTyped

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

json-inspector

Json Inspector is json data validator & sanitizer. It allows you to define validation rules for complex data structures by simple and descriptive way of defining json-compliant inspector schema.

License: GPL-3.0

TypeScript Definitions: DefinitelyTyped

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

xss-scanner

Cross-Site Scripting (XSS) scanner. This tool helps to find possible XSS vulnerabilities. Cross platform - macOS, Linux, and Windows.

License: MIT

TypeScript Definitions: DefinitelyTyped

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

xsslint

Find potential XSS vulnerabilities

License: MIT

TypeScript Definitions: DefinitelyTyped

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

infi-validator

➿ A simple request validator for Express.js apps

License: MIT

TypeScript Definitions: DefinitelyTyped

Bundle Size (min+gzip)

N/A

Not Tree-Shakeable

10 Best JavaScript XSS Sanitizer Libraries

List hand-picked by Openbase ExpertsLearn More

dompurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

sanitize-html

Clean up user-submitted HTML, preserving whitelisted elements and whitelisted attributes on a per-element basis. Built on htmlparser2 for speed and tolerance

xss

Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist

express-validator

An express.js middleware for validator.js.

insane

😾 Lean and configurable whitelist-oriented HTML sanitizer

express-sanitizer

An express.js middleware for node-validator

express-xss-sanitizer

Express 4.x middleware which sanitizes user input data (in req.body, req.query, req.headers and req.params) to prevent Cross Site Scripting (XSS) attack.

xss-clean

Middleware to sanitize user input

express-sanitize-escape

An express.js middleware for sanitizing all query and body parameters automatically

xss-advanced

Node.js Connect middleware to sanitize user input coming from POST body, GET queries, and url params. Works with Express

express-autosanitizer

automatic sanitization of req body fields, params and query fields. uses caja. automatically does sanitization and escaping as middleware.

express-sanitized

An express.js middleware for sanitizing all query and body parameters automatically

@risingstack/protect

Proactively protect your Node.js web services

express-auto-sanitize

Express middleware to auto sanitize user inputs

node-procexss

Middleware to help to prevent xss attacks in your Express/Connect apps

protecc

but most importantly, he protecc

sanitize-middleware

Connect/Express middleware that sanitizes requests to protect against cross-site scripting (XSS) and command injection attacks

scorpion4dev-express-autosanitizer

automatic sanitization of req body fields, params and query. automatically does sanitization and escaping as middleware.

express-caja-sanitizer

An express middleware inspired from express-sanitizer which sanitizes URL params too. It also provides options to sanitize keys and a preprocessor function to exempt a few values from sanitizing.

express-validate

Data validation, filtering and sanitization for express

@aftership/express-sanitized

An express.js middleware for sanitizing all query and body parameters automatically

express-route-sanitizer-middleware

A sanitizer for GET and POST requests payloads

xss-req-sanitizer

Middleware to sanitize http requests

express-secure-handlebars

Express with Secure Handlebars

json-inspector

Json Inspector is json data validator & sanitizer. It allows you to define validation rules for complex data structures by simple and descriptive way of defining json-compliant inspector schema.

xss-scanner

Cross-Site Scripting (XSS) scanner. This tool helps to find possible XSS vulnerabilities. Cross platform - macOS, Linux, and Windows.

xsslint

Find potential XSS vulnerabilities

infi-validator

➿ A simple request validator for Express.js apps

List hand-picked by Openbase Experts
Learn More