Installations
npm install showdown-xss-filter
Developer
Developer Guide
Module System
CommonJS
Min. Node Version
Typescript Support
No
Node Version
NPM Version
1.4.28
Statistics
32 Stars
11 Commits
6 Forks
18 Watching
2 Branches
5 Contributors
Updated on 21 Sept 2023
Languages
JavaScript (100%)
Total Downloads
Cumulative downloads
Total Downloads
3,293,934
Last day
-59.7%
1,038
Compared to previous day
Last week
-5.5%
12,088
Compared to previous week
Last month
-18.5%
55,593
Compared to previous month
Last year
31%
1,085,810
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
showdown-xss-filter
Showdown extension to filter XSS, using leizongmin/js-xss.
Client-side
1<script src="/path/to/showdown/src/showdown.js"></script> 2<script src="/path/to/xss/dist/xss.min.js"></script> 3<script src="/path/to/showdown-xss-filter.js"></script>
1var converter = new showdown.Converter({ extensions: ['xssfilter'] }) 2var text = "<script>alert('xss!')</script>"; 3console.log(converter.makeHtml(text));
Note: be sure to include the dependency on leizongmin/js-xss before this extension.
Server-side (node)
1var showdown = require('showdown'); 2var xssFilter = require('showdown-xss-filter'); 3var converter = new showdown.Converter({extensions: [xssFilter]}); 4 5var text = "<script>alert('xss!')</script>"; 6console.log(converter.makeHtml(text));
No vulnerabilities found.
Reason
no binaries found in the repo
Reason
0 existing vulnerabilities detected
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
Found 1/11 approved changesets -- score normalized to 0
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'master'
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 1 are checked with a SAST tool
Score
3
/10
Last Scanned on 2024-11-25
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More