Description

This package helps to filter the input text that is malicious and intended to attack the server.It contains model that is trained on a dataset of around 6k XSS-attack scripts to classify the input into 2 pre-defined labels i.e malicious and benign and this package has the ability to deal with different types of input like JSON Objects, string array, singular string, Object Array that could be helpful to filter malicious data present in database.

Install

npm install --save xss-attack-detection

Usage

const attackDetection = require('xss-attack-detection');
const xss_detect = new attackDetection.xssAttackDetection();

1. When input is simple string

console.log(xss_detect.detect("<script onload="alert()"></script>"));

// Expected Output
{ gist: 'malicious', confidenceFactor: 99.99999997227279 },

2. When input is array of string.

// To Deal with array as input we have different method named as classifyBatch.

console.log(xss_detect.classifyBatch(["<script onload="alert()"></script>","Hello, how are you"));

// Expected Output
[
{ gist: 'malicious', confidenceFactor: 99.99999997227279 },
{ gist: 'benign', confidenceFactor: 99.98769997227279 },
]

3. When input is array of object

var testingDocs = [
 {
   "input": "<script draggable=\"true\" ondragstart=\"alert(1)\">test</script>",
   "anotherField":'lets go ',
   "k":2
 },
 {
     "input": "Go until script jurong point, crazy.. Available only in bugis n great world la e buffet... Cine there got  amore wat...",
     "anotherField":'Hello how are you',
     "k": 6
   },

   ];

   console.log(d.classifyBatch(test,"k")); // k is primary key

//expected Outlet
[
 {
   input: { gist: 'malicious', confidenceFactor: 99.99999999285946 },
   anotherField: { gist: 'benign', confidenceFactor: 98.41886759120219 },
   primaryKey: 2
 },
 {
   input: { gist: 'benign', confidenceFactor: 99.99999999834742 },
   anotherField: { gist: 'benign', confidenceFactor: 91.66666666666666 },
   primaryKey: 6
 }
]

Extra/Optional Arguments

Contributors Details

License

ISC