Alternatives and similar repositories for csp-next

Users that are interested in csp-next are comparing it to the libraries listed below

• mikewest / strict-csp-for-everyone
  This is both a terrible and wonderful idea.
  ☆12Updated 5 years ago
• w3c / webappsec-csp
  WebAppSec Content Security Policy
  ☆220Updated last month
• mikewest / securer-contexts
  Secure Contexts, but with _more_ secureness!
  ☆20Updated last year
• mozilla / eslint-plugin-no-unsanitized
  Custom ESLint rule to disallows unsafe innerHTML, outerHTML, insertAdjacentHTML and alike
  ☆238Updated last week
• w3c / webappsec-fetch-metadata
  Fetch Metadata
  ☆75Updated 4 months ago
• annevk / orb
  Opaque Response Blocking (CORB++)
  ☆35Updated 3 years ago
• tc39 / security
  Discussion area for security aspects of ECMAScript
  ☆64Updated 7 years ago
• mikewest / scheming-cookies
  Cookies should take scheme into account, just like every other storage mechanism on the web.
  ☆16Updated 5 years ago
• w3c / trusted-types
  A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.
  ☆629Updated last month
• WICG / sanitizer-api
  ☆245Updated last month
• WICG / document-policy
  ☆23Updated 3 years ago
• mikewest / deprecating-document-domain
  `document.domain` intentionally weakens the only security boundary we have. Perhaps we can dump it?
  ☆17Updated last year
• pmeenan / http2priorities
  Test Page for HTTP/2 prioritization (server and browser)
  ☆109Updated 5 years ago
• WICG / origin-policy
  [On hold for now] A mechanism for origins to set their origin-wide configuration in a central location
  ☆33Updated 3 years ago
• w3c / webappsec-post-spectre-webdev
  Post-Spectre Web Development
  ☆18Updated 2 years ago
• mikewest / baseline-header
  What if developers could opt-into better default behaviors en masse, forcing them to pick and choose the legacy risks they want to enable…
  ☆19Updated 2 years ago
• w3c / network-error-logging
  Network Error Logging
  ☆89Updated 3 months ago
• nodejs / security-advisories
  Security advisories for Node.js and the JavaScript ecosystem.
  ☆41Updated 4 years ago
• camillelamy / explainers
  ☆12Updated 3 years ago
• mikewest / http-state-tokens
  Incrementally better HTTP state management.
  ☆301Updated 2 years ago
• google / webpackager
  ☆77Updated 8 months ago
• mozilla / csp-logger
  Log all the CSP violations!
  ☆57Updated 2 years ago
• google / safe-html-types
  Security contract types
  ☆60Updated 2 years ago
• WICG / signature-based-sri
  Signature-based Resource Loading Restrictions
  ☆42Updated 2 weeks ago
• w3c / webappsec
  Web Application Security Working Group repo
  ☆634Updated last week
• tc39 / proposal-symbol-proto
  TC39 proposal for mitigating prototype pollution
  ☆46Updated last year
• HTTPWorkshop / workshop2017
  Working area for the 2017 HTTP Workshop
  ☆23Updated 4 years ago
• mozilla / sanitizer-polyfill
  rewrite constructor arguments, call DOMPurify, profit
  ☆69Updated 11 months ago
• shapesecurity / salvation
  Parse Content Security Policy headers, warn about policy errors, safely manipulate, render, and optimise policies
  ☆72Updated 11 months ago
• WICG / client-hints-infrastructure
  Specification for the Client Hints infrastructure - privacy preserving proactive content negotiation
  ☆63Updated last year