shapesecurity / salvation
Parse Content Security Policy headers, warn about policy errors, safely manipulate, render, and optimise policies
☆68Updated last week
Related projects: ⓘ
- umbrella config to achieve scanjs-like functionality through eslint☆88Updated 3 years ago
- Content-Security-Policy report aggregator/analyzer☆54Updated 4 years ago
- rules for scanjs functionality☆28Updated 3 years ago
- A quick and easy way to test CSP behavior on modern browsers☆49Updated 6 years ago
- Handlebars Context Pre-compiler☆45Updated 6 years ago
- WebAppSec Subresource Integrity☆70Updated last year
- Suborigins☆25Updated 3 years ago
- A robust HTML5 context parser that parses HTML 5 web pages and reports the execution context of each character.☆41Updated 5 years ago
- Log all the CSP violations!☆55Updated last year
- [DEPRECATED] Static analysis tool for javascript code.☆428Updated 3 years ago
- Web security drafts☆31Updated 5 years ago
- Security contract types☆61Updated last year
- Signature-based Resource Loading Restrictions☆17Updated 6 years ago
- Certificate Transparency RFC☆80Updated 3 years ago
- WebAppSec Referrer Policy☆26Updated 3 weeks ago
- Checks filenames to be committed against a library of filename rules to prevent sensitive files in Git☆62Updated this week
- Discussion area for security aspects of ECMAScript☆64Updated 6 years ago
- retire.js has a new home☆20Updated 9 years ago
- WebAppSec Content Security Policy☆207Updated last week
- WikiMo documentation (mainly the security space, but everyone's welcome to use this)☆63Updated 8 months ago
- Security-focused static code analysis for everyone☆82Updated 5 years ago
- What is browser fingerprinting and how should specification authors address it.☆56Updated 8 months ago
- Fetch Metadata☆75Updated 4 months ago
- (Deprecated) https guidance for the 18F team☆156Updated 7 years ago
- jPurify☆64Updated 7 years ago
- This is both a terrible and wonderful idea.☆10Updated 4 years ago
- A Modest Content Security Proposal☆39Updated 3 years ago
- Make it easy to probe the strengths and weaknesses of a hardened Node.js stack☆19Updated 5 years ago
- JavaScript parser and sandbox☆78Updated 8 years ago
- Network Error Logging☆80Updated 3 weeks ago