mikewest / strict-csp-for-everyone
This is both a terrible and wonderful idea.
☆11Updated 5 years ago
Alternatives and similar repositories for strict-csp-for-everyone:
Users that are interested in strict-csp-for-everyone are comparing it to the libraries listed below
- A Modest Content Security Proposal☆40Updated 3 years ago
- Cookies should take scheme into account, just like every other storage mechanism on the web.☆16Updated 5 years ago
- Fetch Metadata☆74Updated 3 weeks ago
- Signature-based Resource Loading Restrictions☆37Updated last month
- User Interface Security and the Visibility API☆11Updated 4 years ago
- What if developers could opt-into better default behaviors en masse, forcing them to pick and choose the legacy risks they want to enable…☆19Updated 2 years ago
- Opaque Response Blocking (CORB++)☆35Updated 2 years ago
- Specifications for Privacy Proxy Implementations☆30Updated last week
- Suborigins☆25Updated 4 years ago
- Explainer for Schemeful Same-Site☆15Updated 4 years ago
- Parse Content Security Policy headers, warn about policy errors, safely manipulate, render, and optimise policies☆72Updated 7 months ago
- Agenda/Minutes of Anti-Fraud Community Group meetings.☆19Updated 2 weeks ago
- Web security drafts☆32Updated 5 years ago
- ☆12Updated 2 years ago
- Compares the TLS configuration of a web server to the Mozilla TLS Profiles☆25Updated last year
- ☆14Updated 3 years ago
- Burp Suite extension to help make Graphql request more readable☆31Updated 7 years ago
- a repo exclusively for security to better manage issues and security considerations for WoT☆18Updated last year
- Finds the domains using the certspotter API☆10Updated 7 years ago
- ☆13Updated 4 years ago
- PrOfESSOS is our open source implementation for fully automated Evaluation-as-a-Service for SSO. PrOfESSOS introduces a generic approach …☆28Updated 2 years ago
- Internet-Draft on IP address privacy☆16Updated 3 weeks ago
- WebAppSec Content Security Policy☆217Updated last month
- Joint task force of Web Authentication WG and Web Payments WG☆15Updated last year
- A standard allowing organizations to nominate security contact points and policies via DNS TXT records.☆31Updated last month
- Source Code Transparency☆11Updated last year
- WebAppSec Credential Management☆50Updated 8 months ago
- A security/privacy review questionnaire for W3C specs☆27Updated last week
- An extensible, heuristic-based vulnerability scanning tool for installed npm packages☆50Updated 3 years ago
- Security contract types☆60Updated 2 years ago