Cure53

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

DOMPurify is a JavaScript library that strips malicious code from untrusted HTML before it is shown on a webpage, protecting users from cross-site scripting attacks with a single function call.

A small collection of potentially useful contract templates

HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

HTTPLeaks - All possible ways, a website can leak HTTP requests

Welcome to the XSS Challenge Wiki!

Cure53 Browser Security White Paper

Project "Flashbang" - An open-source Flash-security helper

No description.

jPurify

Curated list of public penetration testing reports released by several consulting firms

Automatically exported from code.google.com/p/mustache-security

This is a tiny Chrome Extension that protects your from Clipboard XSS Attacks

DOMFortify turns on Trusted Types for a page and quietly takes over the browser's default policy, so that old, vulnerable HTML sinks get auto-sanitized before bad markup ever hits the DOM.

A free Open Source CDN for webmasters and developers

A markdown parser and compiler. Built for speed.

PHP hash "collisions"

The repository for high quality TypeScript type definitions.

The Roundcube Webmail suite

Crev proof repository

No description.

A listing of people and projects involved in the Mozilla Open Source Support (MOSS) program