Safe replacement for the v-html directive

Markdown to HTML using marked and DOMPurify. Safe by default.

Plugin for safe text editing with MKDocs.

Tools and method that I personally use for Recon and Exploitations

Cleans HTML to avoid XSS attacks

Antenna是58同城安全团队打造的一款辅助安全从业人员验证网络中多种漏洞是否存在以及可利用性的工具。其基于带外应用安全测试(OAST)通过任务的形式，将不同漏洞场景检测能力通过插件的形式进行集合，通过与目标进行out-bind的数据通信方式进行辅助检测。

Use DOMPurify on server and client in the same way

Java web and command line applications demonstrating various security topics

长亭科技自研，基于业界领先的语义引擎检测技术，打造的简洁、易用的免费 WAF

CloudDefense.ai is an automated web application security testing tool that audits your web applications by checking for vulnerabilities like SQL Injection, Cross-site scripting and other exploitable vulnerabilities.

🛡 Security Module for Nuxt based on OWASP Top 10 and Helmet

.NetCore常用方法工具类库（正则表达式常用判断、日期时间常用方法、XML快速遍历、动态扩展对象、图片验证码生成、阿里/腾讯短信发送、发送邮件、Json配置文件解析、加密解密等等，持续继承中...）

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

rewrite constructor arguments, call DOMPurify, profit

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

A threat actor may inject malicious content into HTTP requests. The content will be reflected in the HTTP response and executed in the victim's browser

A threat actor may inject malicious content into HTTP requests. The content is not reflected in the HTTP response and executed in the victim's browser.

Provides support for configuring various http headers that are important for web services.

Simple and lightweight library that helps to validate SVG files in security manners.

Check your WAF before an attacker does

VulNote | Vulnerable Note-Taking App in Vue.js 3

:lock: HTTP Headers for Wordpress

Security in Single Page Applications

Installation script for SCNR

Inclusive Angular API for DOMPurify

glint 是一款基于浏览器爬虫golang开发的web漏洞主动(被动)扫描器

Build Content-Security-Policy headers from a JSON file (or build them programmatically)

Web Application Security Scanner Framework