Select a tag to browse associated projects and drill deeper into the tag cloud.
owasp-esapi-java
Claimed by Open Web Application Securi... Analyzed about 5 hours ago
OWASP ESAPI for Java: Strong, Simple Security Controls for Java Developers
Don’t write your own security controls! Reinventing the wheel when it comes to developing security controls for every web application or web service leads to wasted time and massive security holes. The OWASP Enterprise
Licenses:
bsd
OWASP Java HTML Sanitizer
Claimed by Open Web Application Securi... Analyzed about 17 hours ago
The OWASP HTML Sanitizer is a fast and easy to configure HTML Sanitizer written in Java which lets you include HTML authored by third-parties in your web application while protecting against XSS. The existing dependencies are on guava and JSR 305. The other jars are only needed by the test suite.
Licenses:
apache_2, bsd_ish
owasp-esapi-php
O
Claimed by Open Web Application Securi... Analyzed about 3 hours ago
OWASP ESAPI for PHP: Strong, Simple Security Controls for PHP Developers
Don’t write your own security controls! Reinventing the wheel when it comes to developing security controls for every web application or web service leads to wasted time and massive security holes. The OWASP Enterprise
easyXDM
Analyzed about 14 hours ago
A javascript library that uses available techniques to to provide a means of transporting messages and/or method calls between windows in different domains.
--------------------------------------
Formerly known as easyXSS
--------------------------------------
The library is currently
Mostly written in language not available
Licenses:
mit
webappsec-nutshell
Analyzed about 10 hours ago
An ultra-compact intro (or refresher) to Web Application Security.
OWASP Encoder Comparison Reference
O
Claimed by Open Web Application Securi... Analyzed about 4 hours ago
Libraries and frameworks encode ASCII characters differently. The OWASP Enterprise Security API (ESAPI) is the reference implementation for the most comprehensive and secure output encoding/escaping. Using this encoder comparison table, you will see how ESAPI exceeds other framework encoders and
Licenses:
No declared licenses
Stripes XSS Interceptor
Analyzed about 6 hours ago
Stripes XSS Interceptor escapes all the parameters that Stripes binds during its Validation & Binding phase using a wrapped request object (a convenient implementation of the HttpServletRequest interface). The code follows the XSS (Cross Site Scripting) security guidance posted at Open Web Application Security Project (OWASP).
Licenses:
apache_2
django-csp
Claimed by Mozilla Foundation Analyzed about 12 hours ago
Django-CSP is a Content Security Policy implementation for Django. It is implemented as middleware.