GMSGadget is a collection of JavaScript tools designed to bypass XSS mitigations like Content Security Policy and HTML sanitizers. The tools listed are not exploits but rather patched vulnerabilities or JavaScript behaviors that can circumvent HTML restrictions. Contributions for new gadgets and documentation improvements are encouraged.