w3c / trusted-typesLinks
A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.
☆635Updated 2 weeks ago
Alternatives and similar repositories for trusted-types
Users that are interested in trusted-types are comparing it to the libraries listed below
Sorting:
- WebAppSec Content Security Policy☆221Updated 3 months ago
- ☆251Updated last week
- Custom ESLint rule to disallows unsafe innerHTML, outerHTML, insertAdjacentHTML and alike☆236Updated last month
- Web Application Security Working Group repo☆644Updated this week
- A mechanism to selectively enable and disable browser features and APIs☆414Updated 2 weeks ago
- Fetch Metadata☆75Updated 6 months ago
- ☆370Updated 8 months ago
- W3C specs and API reviews☆354Updated 2 months ago
- Web packaging format☆1,246Updated 2 weeks ago
- Incrementally better HTTP state management.☆301Updated 3 years ago
- Detect vulnerable regexes in your project. REDOS, catastrophic backtracking.☆337Updated 3 years ago
- Asynchronous access to cookies from JavaScript☆160Updated last month
- URL Standard☆584Updated 2 months ago
- A Modest Content Security Proposal☆40Updated 4 years ago
- The HTTP Archive website hosted on App Engine☆351Updated this week
- JsAction is a small event delegation library that decouples event binding from the code that can handle the event.☆1,077Updated last year
- A proposal for a Layout Instability specification☆163Updated last year
- HTTP Extensions in progress☆473Updated this week
- Node.js Ecosystem Security Working Group☆528Updated last month
- Some thoughts on how Node.js might respond to a changing security environment☆173Updated 6 years ago
- Draft proposal for SES (Secure EcmaScript)☆236Updated 4 years ago
- Enabling safe experimentation with web APIs☆527Updated last year
- WebAppSec Subresource Integrity☆77Updated 3 months ago
- Lifecycle API to support system initiated discarding and freezing☆156Updated 2 years ago
- Content released at NorthSec 2018 for my talk on prototype pollution☆531Updated last year
- A repository for the Display Locking spec☆299Updated 3 years ago
- Proposal for a programmable JS profiling API for collecting JS profiles from real end-user environments☆203Updated last year
- Storage Standard☆137Updated 2 months ago
- ☆699Updated this week
- Wouldn't it be nice if `User-Agent` was a (set of) client hints?☆611Updated 5 months ago