google / safe-html-types

Related projects ⓘ

Alternatives and complementary repositories for safe-html-types

• WICG / csp-next
  A Modest Content Security Proposal
  ☆39Updated 3 years ago
• google / security-crawl-maze
  Security Crawl Maze is a comprehensive testbed for web security crawlers. It contains pages representing many ways in which one can link …
  ☆155Updated 8 months ago
• shapesecurity / salvation
  Parse Content Security Policy headers, warn about policy errors, safely manipulate, render, and optimise policies
  ☆68Updated 2 months ago
• victims / maven-security-versions
  Identify vulnerable libraries in Maven dependencies
  ☆45Updated last year
• spoofzu / jvmxray
  Externalize Java application access to protected resources as log messages.
  ☆41Updated 5 months ago
• tc39 / security
  Discussion area for security aspects of ECMAScript
  ☆64Updated 6 years ago
• w3c / webappsec-csp
  WebAppSec Content Security Policy
  ☆210Updated 3 weeks ago
• mikewest / strict-csp-for-everyone
  This is both a terrible and wonderful idea.
  ☆10Updated 5 years ago
• mozilla-services / websec-check
  web security checklist for Firefox Services
  ☆74Updated 3 years ago
• mozilla / eslint-plugin-no-unsanitized
  Custom ESLint rule to disallows unsafe innerHTML, outerHTML, insertAdjacentHTML and alike
  ☆231Updated last month
• mikewest / securer-contexts
  Secure Contexts, but with _more_ secureness!
  ☆19Updated 6 months ago
• cschneider4711 / SWAT
  Serial Whitelist Application Trainer
  ☆29Updated 5 years ago
• nccgroup / glasgo
  Go static analysis tool that checks for security issues using an AST.
  ☆28Updated 5 years ago
• mikewest / scheming-cookies
  Cookies should take scheme into account, just like every other storage mechanism on the web.
  ☆16Updated 4 years ago
• MozillaSecurity / octo
  A fuzzing library in JavaScript. ✨
  ☆117Updated 3 weeks ago
• victims / victims-cve-db
  CVE database store
  ☆129Updated 4 years ago
• OWASP / packman
  A documentation and tracking project with the goal of making package management systems more secure.
  ☆49Updated 3 years ago
• kantega / notsoserial
  Java Agent which mitigates deserialisation attacks by making certain classes unserializable
  ☆185Updated 8 years ago
• mveytsman / dilettante
  Maven central doesn't do SSL when serving you JARs. Dilettante is a MiTM proxy for exploiting that.
  ☆159Updated 2 years ago
• google / detangle
  ☆171Updated 6 years ago
• fabric8-analytics / cvedb
  CVE database
  ☆22Updated 4 years ago
• nodejs / security-advisories
  Security advisories for Node.js and the JavaScript ecosystem.
  ☆41Updated 3 years ago
• mikewest / deprecating-document-domain
  `document.domain` intentionally weakens the only security boundary we have. Perhaps we can dump it?
  ☆16Updated last year
• Contrast-Security-OSS / contrast-rO0
  A tiny Java agent that blocks attacks against unsafe deserialization
  ☆83Updated 7 years ago
• find-sec-bugs / find-sec-bugs-demos
  Repository to showcase various configuration recipes with various technologies
  ☆35Updated last year
• w3c / webappsec-fetch-metadata
  Fetch Metadata
  ☆75Updated 6 months ago
• mozfreddyb / eslint-plugin-scanjs-rules
  rules for scanjs functionality
  ☆28Updated 3 years ago
• srcclr / efda
  Evaluation Framework for Dependency Analysis (EFDA)
  ☆42Updated 2 years ago
• uber-archive / paranoid-request
  An SSRF-preventing wrapper around Node's request module
  ☆26Updated 6 years ago
• perdisci / WebCapsule
  Record and Replay Engine for Web Browsers
  ☆16Updated 9 years ago