Select a tag to browse associated projects and drill deeper into the tag cloud.
owasp-esapi-java
Claimed by Open Web Application Securi... Analyzed about 8 hours ago
OWASP ESAPI for Java: Strong, Simple Security Controls for Java Developers
Don’t write your own security controls! Reinventing the wheel when it comes to developing security controls for every web application or web service leads to wasted time and massive security holes. The OWASP Enterprise
Licenses:
bsd
owasp-esapi-php
O
Claimed by Open Web Application Securi... Analyzed about 24 hours ago
OWASP ESAPI for PHP: Strong, Simple Security Controls for PHP Developers
Don’t write your own security controls! Reinventing the wheel when it comes to developing security controls for every web application or web service leads to wasted time and massive security holes. The OWASP Enterprise
OWASP Java HTML Sanitizer
Claimed by Open Web Application Securi... Analyzed about 5 hours ago
The OWASP HTML Sanitizer is a fast and easy to configure HTML Sanitizer written in Java which lets you include HTML authored by third-parties in your web application while protecting against XSS. The existing dependencies are on guava and JSR 305. The other jars are only needed by the test suite.
Licenses:
apache_2, bsd_ish
OWASP Encoder Comparison Reference
O
Claimed by Open Web Application Securi... Analyzed about 5 hours ago
Libraries and frameworks encode ASCII characters differently. The OWASP Enterprise Security API (ESAPI) is the reference implementation for the most comprehensive and secure output encoding/escaping. Using this encoder comparison table, you will see how ESAPI exceeds other framework encoders and
Licenses:
No declared licenses
webappsec-nutshell
Analyzed about 19 hours ago
An ultra-compact intro (or refresher) to Web Application Security.
django-csp
Claimed by Mozilla Foundation Analyzed about 1 hour ago
Django-CSP is a Content Security Policy implementation for Django. It is implemented as middleware.
Stripes XSS Interceptor
Analyzed about 6 hours ago
Stripes XSS Interceptor escapes all the parameters that Stripes binds during its Validation & Binding phase using a wrapped request object (a convenient implementation of the HttpServletRequest interface). The code follows the XSS (Cross Site Scripting) security guidance posted at Open Web Application Security Project (OWASP).
Licenses:
apache_2