CSP Evaluator is a tool that allows developers to check if a Content Security Policy (CSP) serves as mitigation against XSS attacks.

A Chrome extension for finding DOM based XSS vulnerabilities

Best Content-Security-Policy tool to validate and check XSS, Clickjacking & Formjacking protection grade and to detect CSP bypasses.

XSS辅助工具

Find XSS and SOME

Abusing Trusted Types to discover XSS sinks.

目前包含了21种编码,12种解码功能. 还提供了本地html的代码预览功能. 以及各种编码变异等.

Intercept and modify or delete websites' security headers

Web Development tool

An Extension to counter XSS attack!

Allow websites with XSS and CSP protection to be safely iframed in Trialfire

可以动态防御XSS攻击，并帮助管理员发现XSS漏洞的扩展

A tool for protecting you from reflected type of cross site scripting attacks

Adds a new tab in DevTools that makes it easier to generate CSRF or XSS payloads for webapps

XSS Evasion calculator is a useful character Encoding calculator developed by jijojohn for XSS filter evasion

Store your xss payload and get it in your clipboard by cliking ont it. Also show HTML comments found within the document.

XSSive is an extension that can be used to detect reflected, and stored XSS vulnerabilities.

This a xss test demo for everyone.

This extension prevents the $ redefinition and blocks the Facebook message about https://www.facebook.com/selfxss

Přidává Lynt logo do user-agent - XSS detekce

Decode URL">

Protect against XSS and code injection attacks with this plugin

This extension'">