Skip to content

Entry

pompelmi

Appears in 5 awesome lists

In-process file-upload security middleware for Node.js that scans untrusted uploads before storage to detect malware, MIME spoofing, and risky archives, maintained by pompelmi.

Open github.compompelmi/pompelmi

Found in these lists

Awesome JavaScript

Section: Security · Fast file-upload malware scanning for Node.js.

FreshScore 88

Awesome Nestjs

Section: Integrations · File upload scanning integration to inspect untrusted files before storage.

FreshScore 88

Contents

Section: Security Hardening · Local-first file upload scanning for Node.js to inspect untrusted files before storage.

FreshScore 78

Awesome Security

Section: Development · Node.js file-upload malware scanner with MIME sniffing, ZIP-bomb protection and optional YARA rules.

SlowScore 70

Awesome Web Security

Section: Preventing · In-process file-upload security middleware for Node.js that scans untrusted uploads before storage to detect malware, MIME spoofing, and risky archives, maintained by pompelmi.

FreshScore 87

js-xss

Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist by @leizongmin.

In 5 listsDetails

DOMPurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

In 5 listsDetails

verifyfetch

Browser-side integrity verification and resumable downloads for large files using SRI hashes, defending against CDN compromise and supply-chain attacks, by @hamzaydia.

In 4 listsDetails

FCaptcha

Self-hosted, invisible CAPTCHA that detects bots and AI agents via behavioral analysis, TLS fingerprinting, and SHA-256 proof of work. Checkbox or invisible mode; Go, Python, and Node.js servers.

In 3 lists

sanitize-html

清理用户提交的 HTML,在每个元素的基础上保留列入白名单的元素和属性。 建立在 htmlparser2 上,以提高速度和容忍度。

In 2 lists

Use

to create an allowlist of specific positions in your dependency graph where scripts are allowed.

In 2 lists

snync

Prevent and detect if you're vulnerable to dependency confusion supply chain security attacks.

In 2 lists

xss-filters

Secure XSS Filters by Yahoo.