Input Sanitization & Security Packages
Input sanitization, XSS prevention, and application-security utilities that clean untrusted input before it reaches your rendering or storage layer (DOMPurify).
Packages in Input Sanitization & Security
Kind
Sort:Used by Most Apps
confusable_homoglyphs
Detect dangerous Unicode homoglyphs and mixed-script strings to stop impersonation attacks
decancer
Rust library that strips unicode confusables, homoglyphs, and leetspeak from text for moderation and search normalization.
cvss
Python library for computing CVSS v2, v3, and v4 vulnerability scores, with an interactive calculator built in.
seccompiler
Compiles Rust and JSON seccomp filter definitions into loadable BPF programs for Linux syscall jailing.
Advocate
A drop-in wrapper around Python's requests library that blocks SSRF attacks by validating every socket connection before it opens.
Flask-Talisman
A small Flask extension that sets HTTP security headers to protect apps from XSS, clickjacking, and downgrade attacks.
leo-profanity
A zero-dependency profanity filter for JavaScript and TypeScript with multi-language dictionary support.
js-string-escape
Escapes strings into safe JavaScript string literals, correctly handling quotes, backslashes, and all four ECMAScript line-terminator characters.
html-escape
Context-aware HTML encoding and entity decoding for Rust, with no-std support.
libseccomp
Safe, ergonomic Rust bindings for the libseccomp Linux syscall-filtering library
HTMLawed
A single-file PHP library that sanitizes HTML input to block XSS attacks and enforce standards-compliant markup.
altcha
Create and verify ALTCHA proof-of-work CAPTCHA challenges in Python with a zero-dependency, fully typed library.
tarsafe
Secure drop-in replacement for Python's tarfile module that blocks directory-traversal and symlink attacks during extraction.
valid-data-url
Lightweight regex-based validator that checks whether a string is a well-formed RFC 2397 data URL.
saslprep
RFC 4013 SASLprep string normalization for usernames and passwords used in SASL/SCRAM authentication.
unicode-security
Detects Unicode-based security risks in Rust strings, from confusable homoglyphs to mixed-script identifiers, per UTS #39.
sanitize-html-rs
A Rust library for sanitizing untrusted HTML using rule-based allowlists of elements, attributes, and URL patterns.
Joomla Filter
Joomla Framework package for sanitizing and validating input and cleaning output in PHP
quickjs-rs
Sandboxed JavaScript and TypeScript execution for Python, running QuickJS inside a WebAssembly sandbox.
expr-eval-fork
A security-patched fork of expr-eval for safely parsing and evaluating math expressions in JavaScript without native eval().
marked-mangle
A tiny marked.js extension that mangles mailto links into randomized HTML character references to block email-harvesting bots.
capng
A safe, idiomatic Rust wrapper around libcap-ng for managing Linux POSIX capabilities.
clearurls
A Rust library that strips tracking parameters and redirects from URLs using the crowd-sourced ClearURLs rules.
rfc3986-validator
A pure Python regex-based validator for RFC3986 URIs and URI references
