Developer-first error tracking and performance monitoring

The most advanced open-source browser fingerprinting library

HTML Standard

The password hash Argon2, winner of PHC

Hackable Markdown Editor and Viewer (WIP)

DNS over HTTPS config profiles for iOS & macOS

Manages application of security headers with many safe defaults

Fetch Standard

Bridge API to connect with existing Java APIs.

The Nu Html Checker (vnu)

Mozilla HTTP Observatory

DOM Standard

Application Layer DoS attack simulator

Version 1.2. This is the source code to STUNTMAN - an open source STUN server and client code by john selbie. Compliant with the latest RFCs including 5389, 5769, and 5780. Also includes backwards …

Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.

ZAP Add-ons

VSAQ is an interactive questionnaire application to assess the security programs of third parties.

The regex file necessary to build language ports of Browserscope's user agent parser.

A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.

Repair and secure untrusted HTML

ECMAScript parser that produces a Shift format AST

Some ideas around spoofing and detecting user agents.

reverse many of the transformations applied by minifiers and naïve obfuscators

WebAppSec Content Security Policy

⏩ Shift AST Specification

Keyhouse is a skeleton of general-purpose Key Management System written in Rust.

MIME Sniffing Standard

WebAppSec Subresource Integrity

Parse Content Security Policy headers, warn about policy errors, safely manipulate, render, and optimise policies