1 independent xss-protection listing the big search engines bury.
A security-focused rehype plugin that filters URLs based on allowed prefixes