Input Sanitization & Security Packages
Input sanitization, XSS prevention, and application-security utilities that clean untrusted input before it reaches your rendering or storage layer (DOMPurify).
Packages in Input Sanitization & Security
Kind
Sort:Used by Most Apps
common-tags
A well-tested library of tagged template literal functions for cleaning up multiline strings, HTML, and lists in ES2015+ JavaScript.
Flask-Limiter
Rate limiting for Flask applications with pluggable storage backends and per-route limits
react-hcaptcha
Drop-in React and Preact components for adding hCaptcha bot-protection challenges to any form.
django-csp
Content-Security-Policy header management for Django, with per-view overrides and nonce support.
fastify-helmet
Adds essential security HTTP headers to Fastify apps via a thin, Fastify-native wrapper around the helmet middleware.
nh3
Rust-powered HTML sanitizer for Python that strips XSS while preserving safe markup, roughly 20x faster than bleach.
string-strip-html
Strip HTML tags from strings without a full parser, safely handling mixed and templated markup.
react-turnstile
A minimal React component and hook for rendering Cloudflare Turnstile CAPTCHA challenges.
safe-regex2
Detects catastrophic, exponential-time regular expressions before they can freeze your app.
Bandit
A static analysis tool that scans Python code for common security issues.
base64Captcha
A flexible Go library for generating digit, string, math, Chinese-character, and audio CAPTCHAs encoded as base64 strings.
csurf
CSRF token middleware for Express — archived by the Express team in 2025 and no longer maintained.
NelmioCorsBundle
Add configurable CORS headers to your Symfony application with per-URL rules.
Symfony Security CSRF
Generate and validate CSRF tokens to protect PHP applications against cross-site request forgery.
django-axes
Track failed login attempts and lock out brute-force attackers on Django-powered sites.
zxcvbn-python
A Python port of Dropbox's zxcvbn - realistic password strength estimation with crack-time estimates and specific improvement feedback.
Livewire Rate Limiting
Apply rate limiters to Laravel Livewire component actions with a single trait
fast-redact
Very fast object redaction that censors sensitive keys before they reach your logs.
vue-dompurify-html
A DOMPurify-backed replacement for Vue's v-html directive that sanitizes bound HTML to prevent XSS.
free-email-domains
A continuously updated JSON list of free and disposable email domains for filtering signups and scoring leads.
valid-url
Lightweight RFC 3986 URI and URL validation for Node.js, ported line-by-line from a battle-tested Perl module.
nocache
Tiny Express/Connect middleware that sets HTTP headers to disable client-side response caching.
near-membrane
A DOM membrane library for creating fast, secure sandboxed JavaScript environments in the browser.
html-escaper
A tiny, zero-dependency utility that safely escapes and unescapes HTML entities in JavaScript strings.
