Skip to content

Issues: leizongmin/js-xss

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

66 Open 128 Closed
66 Open 128 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Missing single quote escaping when singleQuotedAttributeValue is enabled
#291 opened Sep 30, 2024 by mdk000
1
How to use this packages in typescript project.
#288 opened Apr 13, 2024 by sheikharifulislam
1
Is it possible to preserve case on attributes when filtering XSS?
#286 opened Feb 22, 2024 by ok-martin
How to see what tags are removed?
#284 opened Sep 28, 2023 by Thomas-1985
Doesn't sanitize "<p>abc<iframe//src=jAva&Tab;script:alert(3)>def</p>"
#283 opened Aug 16, 2023 by LeanKhan
1
How to whitelist cookies
#282 opened Aug 14, 2023 by ashuorg
a标签已经被加入到了白名a: ['class', 'href', 'target'],但是href里面放入自定义协议，比如baidu360://efwefwfwe给过滤了，怎么办
#281 opened Jul 28, 2023 by daweiyong
1
img src processed to empty
#280 opened Apr 17, 2023 by wcnjeusr
2
Support being imported by Node
#276 opened Mar 13, 2023 by amjmhs
The href content in a tag is 'data: image', which is not processed
#275 opened Feb 20, 2023 by qsy0213
Cannot create xss instance with options ^1.0.14
#274 opened Jan 27, 2023 by quoctienkt
Links in href/src needs a protocol, but not in url(), why ?
#273 opened Jan 26, 2023 by sky0matic
Ignore greater or less than symbol?
#271 opened Jan 11, 2023 by iamsarthakjoshi
1
whiteList fails when using slashes to separate tag attributes (PR included)
#268 opened Dec 27, 2022 by hensleysecurity
1
Escaping attribute does not work sufficient
#267 opened Dec 16, 2022 by djschilling
1
I would like to know why all styles need to be whitelisted by configuration before they are not filtered?
#266 opened Dec 2, 2022 by XiaoRIGE
At v1.0.14 stripIgnoreTag behavior changed
#265 opened Nov 15, 2022 by BlakeStearman
1
src with blob:... is removed
#264 opened Aug 17, 2022 by tungnat97
1
video标签过滤后source标签丢失
#263 opened Jul 28, 2022 by wangkemin
2
运算符 大于号>和小于号<不想被转码
#260 opened Jun 10, 2022 by Cossey11111
1
Confusing variable assignment - Eslint should be configured for this project
#251 opened Mar 2, 2022 by ctaschereau
2
可不可以设置一个黑名单除了黑名单里面的标签剩余都是白名单
#250 opened Feb 19, 2022 by Lrunlin
单纯一份JS，如何设置css 为false？
#248 opened Nov 29, 2021 by AceChen1
2
whiteList does nothing
#247 opened Nov 23, 2021 by chladnefazole
1
How can I remove [removed] text from stripIgnoreTagBody: ['script'] option?
#244 opened Nov 10, 2021 by amjadaliup
2
ProTip! Exclude everything labeled bug with -label:bug.