Pinned Loading

1. DOMPurify DOMPurify Public

   DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

   JavaScript 17.1k 856

2. DOMFortify DOMFortify Public

   DOMFortify turns on Trusted Types for a page and quietly takes over the browser's default policy, so that old, vulnerable HTML sinks get auto-sanitized before bad markup ever hits the DOM.

   JavaScript 18 1

3. H5SC H5SC Public

   HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

   JavaScript 2.9k 416

4. HTTPLeaks HTTPLeaks Public

   HTTPLeaks - All possible ways, a website can leak HTTP requests

   HTML 2.1k 204

5. Publications Publications Public

   A whole bunch of public pentest reports & papers

   88 10

6. Contracts Contracts Public

   A small collection of potentially useful contract templates

   434 63