XSS Validator

XSS Validator on input fields. It covers all the payloads from the test/payloads.txt
.
Usage
go get github.com/infiniteloopcloud/xss-validator
package main
import xssvalidator "github.com/infiniteloopcloud/xss-validator"
func main() {
err := xssvalidator.Validate("input_data", xssvalidator.DefaultRules...)
if err != nil {
}
err = xssvalidator.Validate("input_data", []xssvalidator.Rule{
xssvalidator.ForbiddenKeywords{},
xssvalidator.ForbiddenHTMLUnescapeStringKeywords{},
}...)
if err != nil {
}
}
Writing custom rules
Anything implements the xssvalidator.Rule
can be a rule passed into the validator.
package ownrule
import (
"errors"
"strings"
xssvalidator "github.com/infiniteloopcloud/xss-validator"
)
var _ xssvalidator.Rule = AlertRule{}
type AlertRule struct{}
func (a AlertRule) Check(v string) error {
if strings.Contains(v, "alert") {
return errors.New("contains alert")
}
return nil
}