LavaMoat / LavaDome
Secure DOM trees isolation and encapsulation leveraging ShadowDOM
☆28Updated last month
Alternatives and similar repositories for LavaDome:
Users that are interested in LavaDome are comparing it to the libraries listed below
- TC39 proposal for mitigating prototype pollution☆46Updated last year
- Use Snow to finally secure your web app's same origin realms!☆108Updated last week
- 🌍 Normalized repository URLs for every package in the npm registry. Updated daily.☆82Updated this week
- rewrite constructor arguments, call DOMPurify, profit☆67Updated 6 months ago
- DOM Clobbering Wiki, Browser Testing, and Payload Generation☆48Updated 4 months ago
- List of Trusted Types bypasses☆91Updated 11 months ago
- Use ProtoTree to visually view the entire javascript prototype chain as a tree!☆11Updated last year
- Find XS-Leaks in the browser by diffing DOM-Graphs in two states☆14Updated 2 months ago
- Beyond XSS: Explore the Web Front-end Security Universe. A series about front-end security☆126Updated last month
- Prototype Pollution in JavaScript☆76Updated 2 years ago
- A Map with weakly referenced values, instead of keys☆32Updated 2 years ago
- Module to prevent SSRF when sending requests in NodeJS. Blocks request to local and private IP addresses☆22Updated last month
- javascript realms security resources☆33Updated last year
- A proposal specifying package.json☆23Updated last year
- Policy management tool for Node.js☆22Updated 2 years ago
- Custom ESLint rule to disallows unsafe innerHTML, outerHTML, insertAdjacentHTML and alike☆235Updated 4 months ago
- Figures out the lowest version of Node.js that satisfies engines.node in package.json.☆13Updated 2 years ago
- ☆101Updated last year
- Proposal to migrate cleanup some to its own proposal repository☆18Updated 2 years ago
- Command-line tool to validate expected TypeScript errors☆20Updated last year
- A grep-like command that uses JavaScript-flavored regular expressions.☆19Updated 9 months ago
- Better way to cancel promises using AbortSignal☆19Updated 11 months ago
- TC39 proposal that enables flexible brand checks before dynamic code loading☆36Updated 3 months ago
- A curated list of awesome browser security learning material.☆140Updated 2 years ago
- Hands-on practical use of HTTP security headers as browser security controls to help secure web applications☆18Updated 2 years ago
- A simple promisified recursive readdir function, with support for globs and .gitignore files.☆13Updated last month
- Warn and formats long classNames usage in JSX☆20Updated 3 weeks ago
- The one-stop shop solution for JS Proxies and FFI APIs.☆26Updated last month
- EcmaScript language proposal for a way to get intrinsics.☆33Updated last year
- ☆83Updated 9 months ago