Top 20 NuGet xss Packages

Cleans HTML from constructs that can be used for cross site scripting (XSS)
Security static code analyzer for .NET
Security static code analyzer for .NET
.Net core Middleware, Add various headers to help secure your site. Disable XSS attacks with Content Security Policies, and make sure browsers do not mime sniff
Rule based HTML sanitizer using a white list. Documentation at: https://github.com/Vereyon/HtmlRuleSanitizer
Roslyn analyzers that aim to help security audits on .NET applications.
Middleware that applies security-related HTTP headers to an OWIN pipeline. See OWASP List https://www.owasp.org/index.php/List_of_useful_HTTP_headers CSP2 implementation according to: http://www.w3.org/TR/CSP2/
Contains a rich set of security-related middlewares for ASP.NET Core with strongly-typed configuration.
ASP.Net vNext Anti Xss Library
Adds the X-XSS-Protection header to each response with text/html media type.
Xss Filters (xss-filters) binding library for Bridge.NET projects.
KVR Injection Tests
A library to prevent xss for WebApi
ProceXSS is a Asp.NET Http module for preventing xss attacks.
Middlewares to help secure your apps
Support for Content Security Policy for ASP.NET applications. New in version 1.0.10 - Full support for the 1.0 version of CSP. Includes some breaking config changes in preparation for the 1.0. "options" is no longer available. The options have now been moved to allowedScriptSources unsafeAl...
Takes untrusted (X)HTML and massages it into real, trusted XHTML. While plenty of effort goes into preserving the original intent, markup validity and safety is the first priority. It's particularly useful with content management systems where users are in control of markup, but you want to target X...
Package Description
A nuget package containing: Emailer, Common Document Generator, An Http Form and File Uploader, Java Script (Angular/JQuery), String Validator (Phone, Email, International Phone, Number, ect.) in Constant Time, XSS and Xml String Manipulator, and a Symmetric Key Base 64 Encryptor and Decryptor.
A Javascript library to warn your users aginst Self XSS attacks in browser console.