Input Sanitization & Security Packages
Input sanitization, XSS prevention, and application-security utilities that clean untrusted input before it reaches your rendering or storage layer (DOMPurify).
Packages in Input Sanitization & Security
Kind
Sort:Used by Most Apps
python-ipware
Retrieve a client's real IP address from HTTP request headers, with proxy handling.
Presidio Analyzer
The PII detection engine behind Presidio, combining NER, regex, and checksum recognizers
Presidio Anonymizer
Replace detected PII in text with masked, hashed, encrypted, or redacted values
Laravel CORS
CORS middleware that adds cross-origin headers to Laravel applications.
serialize-javascript
Serializes JavaScript values-including functions, RegExps, Dates, Maps, Sets, and BigInts-into a superset of JSON that's safe to embed directly in an HTML script tag.
adblock-rust
Brave's high-performance Rust ad-blocking engine, available as a library for any project.
Mews Purifier
A Laravel integration of HTMLPurifier that sanitizes user-supplied HTML to prevent XSS while preserving safe, well-formed markup.
Gregwar Captcha
Generate distorted CAPTCHA images in PHP to stop bots.
disposable-email-domains
A community-maintained JSON list of 120,000+ known disposable email domains for filtering throwaway signups.
django-ipware
A Django application to reliably retrieve a client's real IP address from the request
bjeavons/zxcvbn-php
Realistic PHP password strength estimation via pattern matching and entropy
graphql-query-complexity
Query complexity analysis and validation to protect graphql-js servers
RestrictedPython
Compiles a restricted subset of Python so you can define a trusted boundary for running untrusted code.
ammonia
A fast, allowlist-based HTML sanitization library for Rust built on the html5ever browser-grade parser.
simpleeval
A single-file Python library for safely evaluating user-supplied expressions without exposing full eval() access.
laravel-recaptcha
Drop-in Laravel package for embedding and validating Google reCAPTCHA v2 and v3 in your forms.
react-google-recaptcha-v3
React provider, hook, and HOC for integrating invisible Google reCAPTCHA v3 (and Enterprise) verification into your app.
svg-hush
A Rust library and CLI that strips scripting, cross-origin links, and other XSS vectors from untrusted SVG files.
scrubadub
scrubadub finds and redacts personally identifiable information from free text using a pluggable, locale-aware pipeline of detectors and post-processors.
pathvalidate
A zero-dependency Python library that sanitizes and validates filenames, file paths, and LTSV labels across Windows, Linux, macOS, and POSIX platforms.
ExerciseHTMLPurifierBundle
Symfony integration for HTMLPurifier to sanitize untrusted HTML and prevent XSS
zxcvbn-rs
A Rust port of Dropbox's zxcvbn password strength estimator, scoring passwords 0-4 with pattern matching instead of arbitrary composition rules.
Asteval
A safe, minimalistic evaluator of Python expressions and statements using the ast module.
express-mongo-sanitize
Express middleware that strips MongoDB operator injection payloads from req.body, req.query, req.params, and req.headers before they reach your database queries.
