Alternatives and similar repositories for csp-next

Users that are interested in csp-next are comparing it to the libraries listed below

• mikewest / strict-csp-for-everyone
  This is both a terrible and wonderful idea.
  ☆12Updated 6 years ago
• mikewest / securer-contexts
  Secure Contexts, but with _more_ secureness!
  ☆20Updated last year
• w3c / webappsec-csp
  WebAppSec Content Security Policy
  ☆221Updated last week
• mozilla / eslint-plugin-no-unsanitized
  Custom ESLint rule to disallows unsafe innerHTML, outerHTML, insertAdjacentHTML and alike
  ☆236Updated last month
• w3c / webappsec-fetch-metadata
  Fetch Metadata
  ☆75Updated 6 months ago
• mikewest / scheming-cookies
  Cookies should take scheme into account, just like every other storage mechanism on the web.
  ☆16Updated 5 years ago
• mikewest / deprecating-document-domain
  `document.domain` intentionally weakens the only security boundary we have. Perhaps we can dump it?
  ☆17Updated last year
• google / safe-html-types
  Security contract types
  ☆60Updated 3 years ago
• camillelamy / explainers
  ☆11Updated 3 years ago
• tc39 / security
  Discussion area for security aspects of ECMAScript
  ☆64Updated 7 years ago
• annevk / orb
  Opaque Response Blocking (CORB++)
  ☆36Updated 3 years ago
• WICG / sanitizer-api
  ☆251Updated last week
• w3c / trusted-types
  A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.
  ☆636Updated this week
• WICG / document-policy
  ☆23Updated 3 years ago
• google / csp-evaluator
  ☆370Updated 8 months ago
• WICG / origin-policy
  [On hold for now] A mechanism for origins to set their origin-wide configuration in a central location
  ☆33Updated 3 years ago
• mikewest / http-state-tokens
  Incrementally better HTTP state management.
  ☆301Updated 3 years ago
• pmeenan / http2priorities
  Test Page for HTTP/2 prioritization (server and browser)
  ☆109Updated 5 years ago
• w3c / network-error-logging
  Network Error Logging
  ☆89Updated 5 months ago
• tc39 / proposal-symbol-proto
  TC39 proposal for mitigating prototype pollution
  ☆50Updated 2 years ago
• mikewest / baseline-header
  What if developers could opt-into better default behaviors en masse, forcing them to pick and choose the legacy risks they want to enable…
  ☆19Updated 2 years ago
• WICG / signature-based-sri
  Signature-based Resource Loading Restrictions
  ☆41Updated 2 months ago
• google / webpackager
  ☆75Updated 10 months ago
• w3c / webappsec-post-spectre-webdev
  Post-Spectre Web Development
  ☆18Updated 2 years ago
• mozilla / csp-logger
  Log all the CSP violations!
  ☆57Updated 2 years ago
• w3c / webappsec
  Web Application Security Working Group repo
  ☆645Updated last week
• shapesecurity / salvation
  Parse Content Security Policy headers, warn about policy errors, safely manipulate, render, and optimise policies
  ☆72Updated last year
• mikewest / cookies-over-http-bad
  Archived proposal from 2018. Perhaps the approach in mikewest/scheming-cookies will be more successful!
  ☆51Updated 5 years ago
• mikesamuel / attack-review-testbed
  Make it easy to probe the strengths and weaknesses of a hardened Node.js stack
  ☆19Updated 6 years ago
• mozilla / sanitizer-polyfill
  rewrite constructor arguments, call DOMPurify, profit
  ☆71Updated last year