escape-goat
Escape a string for use in HTML or the inverse
character-parser
Parse JavaScript one character at a time to look for snippets in Templates. This is not a validator, it's just designed to allow you to have sections of JavaScript delimited by brackets robustly.
puka
A cross-platform library for safely passing strings through shells
security
Utility methods for escaping according to OWASP.
lucene-escape-query
Escape a string for a lucene query. Effectively removes all special characters.