Nasty Pirate Macaw


    1.0.4 • Public • Published



    This package helps to filter the input text that is malicious and intended to attack the server.It contains model that is trained on a dataset of around 6k XSS-attack scripts to classify the input into 2 pre-defined labels i.e malicious and benign and this package has the ability to deal with different types of input like JSON Objects, string array, singular string, Object Array that could be helpful to filter malicious data present in database.


    npm install --save xss-attack-detection


    const attackDetection = require('xss-attack-detection');
    const xss_detect = new attackDetection.xssAttackDetection();

    1. When input is simple string

    console.log(xss_detect.detect("<script onload="alert()"></script>"));
    // Expected Output
    { gist: 'malicious', confidenceFactor: 99.99999997227279 },

    2. When input is array of string.

    // To Deal with array as input we have different method named as classifyBatch.
    console.log(xss_detect.classifyBatch(["<script onload="alert()"></script>","Hello, how are you"));
    // Expected Output
    { gist: 'malicious', confidenceFactor: 99.99999997227279 },
    { gist: 'benign', confidenceFactor: 99.98769997227279 },

    3. When input is array of object

    var testingDocs = [
       "input": "<script draggable=\"true\" ondragstart=\"alert(1)\">test</script>",
       "anotherField":'lets go ',
         "input": "Go until script jurong point, crazy.. Available only in bugis n great world la e buffet... Cine there got  amore wat...",
         "anotherField":'Hello how are you',
         "k": 6
       console.log(d.classifyBatch(test,"k")); // k is primary key
    //expected Outlet
       input: { gist: 'malicious', confidenceFactor: 99.99999999285946 },
       anotherField: { gist: 'benign', confidenceFactor: 98.41886759120219 },
       primaryKey: 2
       input: { gist: 'benign', confidenceFactor: 99.99999999834742 },
       anotherField: { gist: 'benign', confidenceFactor: 91.66666666666666 },
       primaryKey: 6

    Extra/Optional Arguments Name Type How it Works
    1 primary key String this will help in adding new key to result which can uniquely identify the document in array.It can be passed as second argument in classifyBatch function
    2 Fields to Check Array this will help is saving time by avoiding brute force checking to only specific fields checking. it can be passed as third argument in classifyBatch function

    Contributors Details Name Contact Info
    1 Harshit Kohli
    2 Sagar Bilwal
    3 Abhinav Jain
    4 Pranay Anand




    npm i xss-attack-detection

    DownloadsWeekly Downloads






    Unpacked Size

    303 kB

    Total Files


    Last publish


    • pranayanand
    • abhinav2422
    • sagar_bilwal
    • harshitkohli25