Jaga is an ultra-lightweight, zero-dependency security layer for HTML templates, providing context-aware XSS protection between user input and the DOM.
-
Updated
Sep 1, 2026 - TypeScript
#
html-escaping
Here are 5 public repositories matching this topic...
Context-aware output escaper for PHP (HTML, attribute, JavaScript, CSS, URL) — OWASP-aligned, dependency-free, PHP 7.4+.
php security php-library xss owasp psr-12 xss-prevention escaper initphp html-escaping output-encoding javascript-escaper
-
Updated
Jun 11, 2026 - PHP
Educational Node.js web security app demonstrating Stored/Reflected XSS attacks and context-aware HTML entity escaping defenses.
nodejs javascript cybersecurity xss-vulnerability web-security vulnerability-demonstration html-escaping
-
Updated
Sep 1, 2026 - JavaScript
Context-aware, just-sufficient output encoding to prevent XSS in HTML, attribute, URI, and CSS contexts
-
Updated
Jul 8, 2026 - Rust
HTML AST with safe-by-default, context-aware escaping for Standard ML. XSS holes are opt-in and greppable. Pure, dual-compiler (MLton + Poly/ML).
html web templating pure xss sml standard-ml mlton deterministic polyml html-escaping sjqtentacles-web
-
Updated
Jul 11, 2026 - Standard ML
Add this topic to your repo
To associate your repository with the html-escaping topic, visit your repo's landing page and select "manage topics."