npmpackage.info

Gathering detailed insights and metrics for vue-xss

Other packages similar to vue-xss

vue-dompurify-html

5.3.0

Safe replacement for the v-html directive

vue-html-secure

1.0.10

Vue.js 2.x and 3.x plugin to add HTML secure directives v-html-remove, v-html-escape, v-html-safe

@zhangqingcq/plug-r-qw

1.5.25

A JS lib base on Vue and View-design, you can achieve some complex functions with simple code after install this lib.

nuxt-security

2.2.0

🛡️ Security Module for Nuxt based on HTTP Headers and Middleware

Gathering detailed insights and metrics for vue-xss

vue-xss - 1.0.5 | npmpackage.info

vue-xss

一个开箱即用的Vue.js插件，可通过简单的方式防止XSS攻击

1.0.5

MIT

JavaScript

17.85 kB

1.7

Installations

npm install vue-xss

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Node Version

10.15.2

NPM Version

6.4.1 Pull Requests

Open

3

Total

46

Closed

15

Merged

28

Issues

Open

0

Total

1

Closed

1

Releases

Unable to fetch releases

Languages

JavaScript

JavaScript (100%)

Developer

hua909000

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

MIT License

13 Stars

66 Commits

1 Watchers

5 Branches

1 Contributors

Updated on Feb 03, 2024

Maintainers

View All 1 Contributors

Package Meta Information

Latest Version

1.0.5

Package Id

vue-xss@1.0.5

Unpacked Size

17.85 kB

Size

11.30 kB

File Count

NPM Version

6.4.1

Node Version

10.15.2

Published on

Apr 07, 2023

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

xss

vue-xss

npm version language file size LICENSE

一个开箱即用的Vue.js插件，可通过简单的方式防止XSS攻击

有任何问题欢迎发布 issue，我会在看到后第一时间回复大家。如果觉得还不错的话，不要吝啬你的 star 哦~

安装

推荐使用npm安装

1npm i vue-xss

使用

1// main.js
2import VueXss from 'vue-xss'
3Vue.use(VueXss)

1<!-- *.vue -->
2<div v-html="$xss(content)"></div>

自定义配置项

支持 js-xss 的自定义规则，可通过 options 对象形式传入实例，具体请点击 js-xss 查看

示例

1// mani.js
2var options = {
3  // 默认白名单参考 xss.whiteList
4  whiteList: {
5    a: ['href', 'style'],
6    img: ['src', 'alt'],
7    ...
8  },
9  stripIgnoreTag: true, // 去掉不在白名单上的标签   true：去掉不在白名单上的标签
10  stripIgnoreTagBody: ['script', 'style'] // 去掉不在白名单上的标签及标签体   ['tag1', 'tag2']：仅去掉指定的不在白名单上的标签
11  onTagAttr: function () {
12    // todo
13  },
14  ...
15}
16
17import VueXss from 'vue-xss'
18Vue.use(VueXss, options)

1<!-- *.vue -->
2
3<template>
4  <div v-html="$xss(content)"></div>
5  <!-- 过滤后输出：<iframe></iframe> -->
6<template>
7
8<script>
9
10export default {
11  data () {
12    return{
13      content: '<iframe onload=alert("XSS-TEST")></iframe>'
14    }
15  },
16  ...
17}
18
19</script>

鸣谢

感谢 js-xss 作者的支持 @ leizongmin

LICENSE

MIT

No vulnerabilities found.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

0

Security-Policy

Determines if the project has published a security policy.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Score

1.7

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More