XSS Vaccine 🛡️

An enterprise-grade, lightweight, and robust Cross-Site Scripting (XSS) sanitizer tailored for Node.js (Express, Fastify, etc.) and Browser environments.

Powered by sanitize-html and brought to you by ARK PLATFORMS.

Features

• 🧹 Deep Object & Array Sanitization: Automatically iterates through nested JSON payloads, purifying every string.
• ⚡ Express Middleware Built-in: Drop it directly into your Node.js routes to instantly clean req.body, req.query, and req.params.
• 🔒 Secure Defaults: Strict allowed tags and attributes configured out of the box to prevent modern XSS bypasses.
• 🛠️ Fully Typed: 100% written in TypeScript.

Installation

npm install xss-vaccine

Quick Start

1. Basic String Purification

import { sanitizeString } from "xss-vaccine";

const dirty = '<script>alert("hacked")</script><b>Hello</b>';
const clean = sanitizeString(dirty);

console.log(clean); // Outputs: "<b>Hello</b>"

2. Deep Object Sanitization

Ideal for cleaning incoming API payloads before storing them in a database.

import { sanitizeObject } from "xss-vaccine";

const incomingPayload = {
  title: "My Post",
  content: "<img src=x onerror=alert(1)>",
  metadata: {
    author: "<a href='javascript:alert(1)'>Click me</a>",
  },
};

const safePayload = sanitizeObject(incomingPayload);
/* 
Result: {
    title: "My Post",
    content: "",
    metadata: {
        author: "<a>Click me</a>" // Harmless anchor left
    }
}
*/

3. Express Framework Middleware

Just plug it into your Express app globally or per-route to eliminate XSS automatically.

import express from "express";
import { xssMiddleware } from "xss-vaccine";

const app = express();
app.use(express.json());

// Apply globally to clean body, query, and params
app.use(xssMiddleware());

app.post("/api/users", (req, res) => {
  // req.body is already 100% sanitized here!
  res.json(req.body);
});

Support & Contact

If you need any assistance, feel free to reach out to our support team: 📧 Email: [email protected]

Copyright

© 2026 ARK PLATFORMS, LLC and ARK PLATFORMS, EUROPE LTD. All rights reserved.

Follow us on our social networks to stay tuned for new updates and tools!

• Twitter / X
• LinkedIn
• Instagram