Jaga is an ultra-lightweight, zero-dependency security layer for HTML templates, providing context-aware XSS protection between user input and the DOM.
-
Updated
Apr 1, 2026 - TypeScript
#
html-escaping
Here are 3 public repositories matching this topic...
Context-aware output escaper for PHP (HTML, attribute, JavaScript, CSS, URL) — OWASP-aligned, dependency-free, PHP 7.4+.
php security php-library xss owasp psr-12 xss-prevention escaper initphp html-escaping output-encoding javascript-escaper
-
Updated
Jun 11, 2026 - PHP
HTML AST with safe-by-default, context-aware escaping for Standard ML. XSS holes are opt-in and greppable. Pure, dual-compiler (MLton + Poly/ML).
html web templating pure xss sml standard-ml mlton deterministic polyml html-escaping sjqtentacles-web
-
Updated
Jun 22, 2026 - Standard ML
Improve this page
Add a description, image, and links to the html-escaping topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the html-escaping topic, visit your repo's landing page and select "manage topics."