w3c / trusted-types
A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.
☆618Updated last month
Alternatives and similar repositories for trusted-types:
Users that are interested in trusted-types are comparing it to the libraries listed below
- ☆241Updated last week
- WebAppSec Content Security Policy☆217Updated 3 weeks ago
- ☆352Updated 2 months ago
- Custom ESLint rule to disallows unsafe innerHTML, outerHTML, insertAdjacentHTML and alike☆236Updated 5 months ago
- Web Application Security Working Group repo☆619Updated this week
- URL Standard☆560Updated 3 weeks ago
- Fetch Metadata☆74Updated 2 weeks ago
- A collection of browser-based side channel attack vectors.☆746Updated last year
- Web packaging format☆1,242Updated this week
- Storage Standard☆135Updated 3 weeks ago
- A mechanism to selectively enable and disable browser features and APIs☆402Updated 2 months ago
- W3C specs and API reviews☆339Updated 3 weeks ago
- Lifecycle API to support system initiated discarding and freezing☆156Updated last year
- Proposal for a programmable JS profiling API for collecting JS profiles from real end-user environments☆200Updated 9 months ago
- Detect vulnerable regexes in your project. REDOS, catastrophic backtracking.☆326Updated 3 years ago
- Some thoughts on how Node.js might respond to a changing security environment☆173Updated 6 years ago
- Web IDL Standard☆432Updated last month
- Content released at NorthSec 2018 for my talk on prototype pollution☆524Updated 10 months ago
- Incrementally better HTTP state management.☆300Updated 2 years ago
- Wouldn't it be nice if `User-Agent` was a (set of) client hints?☆601Updated 3 months ago
- A proposal for a Layout Instability specification☆160Updated last year
- A repository for the Display Locking spec☆296Updated 2 years ago
- WebIDL parser☆258Updated 2 weeks ago
- Draft proposal for SES (Secure EcmaScript)☆227Updated 4 years ago
- ☆675Updated this week
- [On hold] A proposal for an async key/value storage API for the web☆551Updated 2 years ago
- Lint an npm or yarn lockfile to analyze and detect security issues☆792Updated 7 months ago
- Console Standard☆280Updated 4 months ago
- Asynchronous access to cookies from JavaScript☆149Updated 9 months ago
- Web API proposal for sharing data from a web page☆358Updated 10 months ago