← All SPoG micro-apps

Cross-Site Scripting (XSS) Pattern & Sanitization Screener

Scans input strings for malicious HTML tag injection and JavaScript execution vectors (XSS).

Notice: engineering verification utility. Use test or de-identified data and verify results independently before relying on them.

How it works

Standard: OWASP Top 10 Injection / CWE-79

Formula: Regex matching for <script>, onerror=, javascript:, and onload= vectors

Checks: Non-empty text string

Calculated locally in browser memory; nothing leaves your browser.

Deterministic local-first client-side execution. Provided as-is without warranty.