mikesamuel/no-object-forgery

Stars
2
Language
JavaScript
License
Apache License 2.0
Created over 6 years ago
Updated over 6 years ago

mikesamuel/no-object-forgery

mikesamuel

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Hooks JSON to mitigate object forgery attacks

regexp-make-js

ES6 string template tag for creating dynamic regular expressions

node-sec-patterns

Security design pattern support for Node.js

attack-review-testbed

Make it easy to probe the strengths and weaknesses of a hardened Node.js stack

safesql

Create SQL queries safely via a JavaScript template tag

html-contextual-autoescaper-java

Prevents XSS by figuring out how to escape untrusted values in templates

es5-lexer

An EcmaScript lexical scanner that is as correct as one can be and produces a token stream that any valid EcmaScript parser will unambiguously interpret.

jquery-jquery-tmpl-proposal

Implementation, tests, and benchmarks for the jQuery templates strawman at http://wiki.jqueryui.com/w/page/37898666/Template

sh-template-tag

NPM package that provides a string template tag for safely composing sh/bash shell commands

template-tag-common

An NPM library that simplifies authoring JS string template tags

prebake

Given JavaScript evaluates eval early so that the result can run with eval turned off.

closure-maven-plugin

Makes it easy to build web applications by integrating closure-{compiler,stylesheets,templates} and protocol buffers using a maven plugin

jsconf-eu-2018

Demo code for a talk

pug-plugin-trusted-types

XSS prevention for Pug templates with typesafe exceptions

is-template-object

Polyfill for the Array.isTemplateObject TC39 proposal

arity-of

Library that exposes max arity and other metadata for JS functions

evalable

Relax the requirement that the argument to eval be a string in a non-breaking way

nosj

A grammar for parsing JSON right-to-left

es6-lru-cache

An LRU cache implementation based on ES6 Maps

module-keys

Module identity as a basis for privilege separation for ESM & CommonJS modules

proposal-hostensurecancompilestrings-passthru

TC39 Proposal to allow HostEnsureCanCompileStrings to pass enough information to/from the host to implement expected changes to CSP & TT

unduck

Assembles instances of class types from bags of properties.

LexIcon

Converts grammars into hardened parser and content-generation tools

strings-are-hard

A minimal Kotlin multiplatform project to reproduce https://youtrack.jetbrains.com/issue/KT-39432

eval-in-order

TC39 spec cleanup: https://github.com/tc39/ecma262/issues/1495

code-interlingua

A parse-tree for a subset of Java that is useful as an intermediate language for multi-backend code generators

web-puzzlers-video-series

Supporting code for medium.com/@mikesamuel/puzzling-towards-security-a12b9427124

fences-maven-enforcer-rule

An enforcer plugin rule that augments Java access control restrictions.