Skip to content

Add flare-redact to Input Validation & Output Encoding #150

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
GravityHaxx wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Add flare-redact to Input Validation & Output Encoding #150

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -102,6 +102,7 @@ A curated list of awesome Node.js Security resources.
- [DOMPurify](https://github.com/cure53/DOMPurify) - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG.
- [envalid](https://github.com/af/envalid) - Envalid is a small library for validating and accessing environment variables in Node.js.
- [data-guardian](https://www.npmjs.com/package/data-guardian) - data-guardian is a tiny, highly customizable lib which can mask sensitive data in arbitrary entities and can help with [OWASP Protect Data everywhere](https://owasp.org/www-project-proactive-controls/v3/en/c8-protect-data-everywhere).
- [flare-redact](https://github.com/flare-collection/flare-redact) - Zero-dependency secret & PII redaction for logs, objects, and LLM prompts: content-based detection with checksum-validated detectors, reversible encrypted vaults, and pino/winston/Express integrations.
- [is-path-inside-secure](https://www.npmjs.com/package/is-path-inside-secure) - is-path-inside-secure is a symlink-aware implementation of the popular [is-path-inside](https://www.npmjs.com/package/is-path-inside) npm package, designed to help prevent path-traversal vulnerabilities.
- [spotlighting-datamarking](https://www.npmjs.com/package/spotlighting-datamarking) - spotlighting-datamarking provides a lightweight implementation of the [Spotlighting paper’s techniques](https://arxiv.org/abs/2403.14720), offering data delimiting, datamarking, and optional Base64 encoding to help separate data from instructions and reduce susceptibility to indirect prompt-injection attacks.
- [promptpurify](https://www.npmjs.com/package/promptpurify) - structural prompt firewall for LLM apps, with a trained classifier for prompt-injection and jailbreak inputs.
Expand Down