DNS over HTTPS config profiles for iOS & macOS

Keyhouse is a skeleton of general-purpose Key Management System written in Rust.

Hackable Markdown Editor and Viewer (WIP)

Repair and secure untrusted HTML

Distributed job management/scheduling engine in Rust.

A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.

Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.

Version 1.2. This is the source code to STUNTMAN - an open source STUN server and client code by john selbie. Compliant with the latest RFCs including 5389, 5769, and 5780. Also includes backwards …

DOM Standard

MIME Sniffing Standard

Fetch Standard

HTML Standard

H2HC 2017 Slides/Materials/Presentations

reverse many of the transformations applied by minifiers and naïve obfuscators

The regex file necessary to build language ports of Browserscope's user agent parser.

ZAP Add-ons

an Abstract Semantic Graph (ASG) for ECMAScript programs and a way to generate one from a Shift AST

Subresource Integrity tools

Rewrites HTML files with SRI hashes

Application Layer DoS attack simulator

The password hash Argon2, winner of PHC

Mozilla HTTP Observatory

VSAQ is an interactive questionnaire application to assess the security programs of third parties.

The Nu Html Checker (vnu)

Developer-first error tracking and performance monitoring

WebAppSec Subresource Integrity

WebAppSec Content Security Policy

Bridge API to connect with existing Java APIs.

A quick and easy way to test CSP behavior on modern browsers