xss

SafeLine

+197

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

hahwul/dalfox

+20

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

DOMPurify

+22

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

hackerone-reports

+18

Top disclosed reports from HackerOne

uusec-waf

+4

Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.

HtmlSanitizer

+2

Cleans HTML to avoid XSS attacks

noscript

+2

The popular NoScript Security Suite browser extension.

lamp-cloud

+2

[灯灯]微服务中后台快速开发平台，支持jdk21、jdk17、jdk8，专注于多租户、开放平台解决方案，亦可作为普通项目（非SaaS架构）的基础开发框架使用，目前已实现插拔式数据库隔离、SCHEMA隔离、字段隔离 等租户隔离方案。

BugScanner

+1

🐛 Advanced web vulnerability scanner with 5-rule false-positive reduction, WAF evasion, and modern HTML reports