Cure53

DOMPurify. DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

H5SC. HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

HTTPLeaks. HTTPLeaks - All possible ways, a website can leak HTTP requests

XSSChallengeWiki. Welcome to the XSS Challenge Wiki!

Contracts. A small collection of potentially useful contract templates

browser-sec-whitepaper. Cure53 Browser Security White Paper

Flashbang. Project "Flashbang" - An open-source Flash-security helper

Publications. A whole bunch of public pentest reports & papers

jPurify. jPurify

public-pentesting-reports. Curated list of public penetration testing reports released by several consulting firms

mustache-security. Automatically exported from code.google.com/p/mustache-security

DOMFortify. DOMFortify turns on Trusted Types for a page and quietly takes over the browser's default policy, so that old, vulnerable HTML sinks get auto-sanitized before bad markup ever hits the DOM.

PastePurify. This is a tiny Chrome Extension that protects your from Clipboard XSS Attacks

jsdelivr. A free Open Source CDN for webmasters and developers

marked. A markdown parser and compiler. Built for speed.

hashes. PHP hash "collisions"

DefinitelyTyped. The repository for high quality TypeScript type definitions.

crev-proofs. Crev proof repository

roundcubemail. The Roundcube Webmail suite

AppSecEurope2017.

MOSS-Directory. A listing of people and projects involved in the Mozilla Open Source Support (MOSS) program