Alternatives and similar repositories for csp-next

Users that are interested in csp-next are comparing it to the libraries listed below

• mikewest / strict-csp-for-everyone
  This is both a terrible and wonderful idea.
  ☆12Updated 6 years ago
• w3c / webappsec-csp
  WebAppSec Content Security Policy
  ☆220Updated this week
• mikewest / securer-contexts
  Secure Contexts, but with _more_ secureness!
  ☆20Updated last year
• w3c / webappsec-fetch-metadata
  Fetch Metadata
  ☆75Updated 10 months ago
• mozilla / eslint-plugin-no-unsanitized
  Custom ESLint rule to disallows unsafe innerHTML, outerHTML, insertAdjacentHTML and alike
  ☆240Updated 5 months ago
• tc39 / security
  Discussion area for security aspects of ECMAScript
  ☆64Updated 8 years ago
• annevk / orb
  Opaque Response Blocking (CORB++)
  ☆36Updated 3 years ago
• WICG / sanitizer-api
  ☆261Updated last week
• mikewest / deprecating-document-domain
  `document.domain` intentionally weakens the only security boundary we have. Perhaps we can dump it?
  ☆17Updated 2 years ago
• shapesecurity / salvation
  Parse Content Security Policy headers, warn about policy errors, safely manipulate, render, and optimise policies
  ☆72Updated 2 months ago
• mikewest / scheming-cookies
  Cookies should take scheme into account, just like every other storage mechanism on the web.
  ☆16Updated 5 years ago
• mikewest / http-state-tokens
  Incrementally better HTTP state management.
  ☆300Updated 3 years ago
• google / safe-html-types
  Security contract types
  ☆60Updated 3 years ago
• w3c / trusted-types
  A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.
  ☆649Updated 3 months ago
• WICG / document-policy
  ☆23Updated 3 years ago
• mikewest / baseline-header
  What if developers could opt-into better default behaviors en masse, forcing them to pick and choose the legacy risks they want to enable…
  ☆19Updated 3 years ago
• camillelamy / explainers
  ☆11Updated 3 years ago
• WICG / origin-policy
  [On hold for now] A mechanism for origins to set their origin-wide configuration in a central location
  ☆33Updated 3 years ago
• google / webpackager
  ☆76Updated last year
• google / csp-evaluator
  ☆381Updated 11 months ago
• w3c / network-error-logging
  Network Error Logging
  ☆90Updated last week
• WICG / signature-based-sri
  Signature-based Resource Loading Restrictions
  ☆44Updated 5 months ago
• whatwg / cookiestore
  Asynchronous access to cookies from JavaScript
  ☆163Updated 3 weeks ago
• w3c / webappsec-post-spectre-webdev
  Post-Spectre Web Development
  ☆18Updated 2 years ago
• pmeenan / http2priorities
  Test Page for HTTP/2 prioritization (server and browser)
  ☆109Updated 6 years ago
• w3c / webappsec
  Web Application Security Working Group repo
  ☆654Updated 2 months ago
• nodejs / security-advisories
  Security advisories for Node.js and the JavaScript ecosystem.
  ☆40Updated 4 years ago
• HTTPWorkshop / workshop2017
  Working area for the 2017 HTTP Workshop
  ☆23Updated 5 years ago
• sbingler / schemeful-same-site
  Explainer for Schemeful Same-Site
  ☆15Updated 5 years ago
• mozilla / csp-logger
  Log all the CSP violations!
  ☆57Updated 2 years ago