diff --git a/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md b/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md index c6dcf1b384..275a851714 100644 --- a/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md +++ b/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md @@ -339,10 +339,10 @@ The `SanitizeHelper` module provides a set of methods for scrubbing text of unde ``` **Other libraries that provide HTML Sanitization include:** -- [HTML sanitizer](https://github.com/google/closure-library/tree/master/closure/goog/html/sanitizer) from [Google Closure Library](https://developers.google.com/closure/library/) -- [PHP HTML Purifier](http://htmlpurifier.org/). -- [JavaScript/Node.js Bleach](https://github.com/ecto/bleach). -- [Python Bleach](https://pypi.python.org/pypi/bleach). +- [HTML sanitizer](https://github.com/google/closure-library/blob/master/closure/goog/html/sanitizer/htmlsanitizer.js) from [Google Closure Library](https://developers.google.com/closure/library/) (JavaScript/Node.js, [docs](https://google.github.io/closure-library/api/goog.html.sanitizer.HtmlSanitizer.html)) +- [DOMPurify](https://github.com/cure53/DOMPurify) (JavaScript, requires [jsdom](https://github.com/jsdom/jsdom) for Node.js) +- [PHP HTML Purifier](http://htmlpurifier.org/) +- [Python Bleach](https://pypi.python.org/pypi/bleach) ## RULE \#7 - Avoid JavaScript URL's