Skip to content

Issues: voku/anti-xss

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

17 Open 56 Closed
17 Open 56 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Vulnerability found
#155 opened Nov 1, 2024 by plakidan
1
Issue with sanitising XSS on Base64 encoded strings with trailing double equal (==) signs
#151 opened Oct 16, 2024 by EricSocs
@voku
1
False positive: "system ("
#150 opened Sep 30, 2024 by friggingee
1
Please add big warning that this package should not be included in any non-UTF-8 application or package dependency
#148 opened May 9, 2024 by cmanley
Fix failing test "testSvgXssFileV1"
#147 opened Mar 8, 2024 by Chris53897
JSON Encoded HTML attribute issues
#143 opened Feb 22, 2024 by breconwhite
Example 6 returns unexpected false in isXssFound()
#141 opened Feb 12, 2024 by banakito
Why is my output different from your example
#135 opened Nov 10, 2023 by ken678
@voku
False positive 'abc < abcd'
#134 opened Nov 3, 2023 by timmit-nl
3
False postive "Behavior:"
#129 opened Aug 24, 2023 by attrib
Just question about htmlspecialchars and this
#128 opened Aug 14, 2023 by Pok4
1
style=foo:expres\sion(1058+{valueOf:alert})} and style=color:expres\sion(1834+{toString:alert} XSS Issue
#126 opened Jun 14, 2023 by psinghracknap
1
false positive in url geolocation.com
#114 opened Nov 28, 2022 by alechner
@voku
2
FP: text like " system (e.g. Windows 10, Mac OS X etc.) "
#112 opened Aug 15, 2022 by voku
@voku
Valid hex characters invalidates urls and remove them from the output
#103 opened Mar 20, 2022 by paxter
JavaScript keywords will be removed in pre/code tag
#102 opened Mar 19, 2022 by paxter
@voku
1
Dependency Dashboard
#89 opened Jan 24, 2022 by renovate bot
10 tasks
ProTip! What’s not been updated in a month: updated:<2024-12-04.