Alternatives and similar repositories for csp-next

Users that are interested in csp-next are comparing it to the libraries listed below

• mikewest / strict-csp-for-everyone
  This is both a terrible and wonderful idea.
  ☆12Updated 6 years ago
• w3c / webappsec-csp
  WebAppSec Content Security Policy
  ☆221Updated 2 months ago
• mikewest / securer-contexts
  Secure Contexts, but with _more_ secureness!
  ☆20Updated last year
• w3c / webappsec-fetch-metadata
  Fetch Metadata
  ☆75Updated 9 months ago
• mozilla / eslint-plugin-no-unsanitized
  Custom ESLint rule to disallows unsafe innerHTML, outerHTML, insertAdjacentHTML and alike
  ☆239Updated 4 months ago
• annevk / orb
  Opaque Response Blocking (CORB++)
  ☆36Updated 3 years ago
• WICG / origin-policy
  [On hold for now] A mechanism for origins to set their origin-wide configuration in a central location
  ☆33Updated 3 years ago
• mikewest / deprecating-document-domain
  `document.domain` intentionally weakens the only security boundary we have. Perhaps we can dump it?
  ☆17Updated 2 years ago
• camillelamy / explainers
  ☆11Updated 3 years ago
• mikewest / scheming-cookies
  Cookies should take scheme into account, just like every other storage mechanism on the web.
  ☆16Updated 5 years ago
• w3c / network-error-logging
  Network Error Logging
  ☆89Updated this week
• WICG / sanitizer-api
  ☆259Updated last month
• mikewest / baseline-header
  What if developers could opt-into better default behaviors en masse, forcing them to pick and choose the legacy risks they want to enable…
  ☆19Updated 3 years ago
• tc39 / proposal-symbol-proto
  TC39 proposal for mitigating prototype pollution
  ☆52Updated 2 years ago
• WICG / document-policy
  ☆23Updated 3 years ago
• mikewest / http-state-tokens
  Incrementally better HTTP state management.
  ☆301Updated 3 years ago
• google / webpackager
  ☆76Updated last year
• WICG / signature-based-sri
  Signature-based Resource Loading Restrictions
  ☆44Updated 4 months ago
• WICG / client-hints-infrastructure
  Specification for the Client Hints infrastructure - privacy preserving proactive content negotiation
  ☆62Updated last year
• shapesecurity / salvation
  Parse Content Security Policy headers, warn about policy errors, safely manipulate, render, and optimise policies
  ☆72Updated last month
• w3c / webappsec
  Web Application Security Working Group repo
  ☆653Updated last month
• google / csp-evaluator
  ☆377Updated 10 months ago
• mozilla / csp-logger
  Log all the CSP violations!
  ☆57Updated 2 years ago
• whatwg / cookiestore
  Asynchronous access to cookies from JavaScript
  ☆162Updated 3 weeks ago
• google / safe-html-types
  Security contract types
  ☆60Updated 3 years ago
• w3c / webappsec-post-spectre-webdev
  Post-Spectre Web Development
  ☆18Updated 2 years ago
• cfredric / sameparty
  ☆33Updated 3 years ago
• w3c / webappsec-permissions-policy
  A mechanism to selectively enable and disable browser features and APIs
  ☆415Updated 3 months ago
• w3ctag / meetings
  Minutes of all TAG Meetings and Calls
  ☆65Updated last week
• mozilla / sanitizer-polyfill
  rewrite constructor arguments, call DOMPurify, profit
  ☆71Updated last year