ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

☕ Latte: the safest & truly intuitive templates for PHP. Engine for those who want the most secure PHP sites.

㊙️ AntiXSS | Protection against Cross-site scripting (XSS) via PHP

Adds extra security-related features in your Symfony application

Build Content-Security-Policy headers from a JSON file (or build them programmatically)

OWASP Vulnerable Web Application Project https://github.com/hummingbirdscyber

Demo of a Vue.js app that mixes both clientside templates and serverside templates leading to an XSS vulnerability

Cross-site scripting labs for web application security enthusiasts

利用XSS入侵内网(Use XSS automation Invade intranet)

Laravel XSS Protection Middleware

this repository is a docker containing some "XSS vulnerability" challenges and bypass examples.

A jQuery augmented PHP library for creating secure HTML forms and validating them easily

Make XSS Great Again

xWAF 3.0 - Free Web Application Firewall, Open-Source.

A Deliberately Insecure Web Application

A tool for the persistent XSS exploitation with a focus for mobile web browsers

Alternative to XSS Hunter for blind XSS.

Filter user input for XSS but don't touch other html

Lightweight In-App Web Application Firewall for PHP

The objective of this class is offer an automatic system of protection for developers's projects and simplify some security operations as the check of CSRF or XSS all in a simple class. Infact you could just call the main method to have better security yet without too much complicated operations.