Web Application Security Checklist (2021)

• Twig

  56 8,015 9.1 PHP

  Twig, the flexible, fast, and secure template language for PHP

  

Twig

• DOMPurify

  42 12,802 8.8 JavaScript

  DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

DOMPurify

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• Gson

  27 22,945 9.1 Java

  A Java serialization/deserialization library to convert Java Objects into JSON and back

  

Use a well-known software component for the job and keep it rigorously up to date. Vulnerabilities are discovered in many deserialization libraries all the time. GSon is not a bad choice.

• selinux-coloring-book

  1 500 1.8

  A coloring book to help folks understand how SELinux works.

SELinux Coloring Book

• trivy

  82 21,316 9.7 Go

  Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

  

• Vault

  160 29,644 10.0 Go

  A tool for secrets management, encryption as a service, and privileged access management

  

HashiCorp Vault

• Thymeleaf

  21 2,724 5.4 Java

  Thymeleaf is a modern server-side Java template engine for both web and standalone environments.

  

Thymeleaf

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• Keycloak

  229 19,857 10.0 Java

  Open Source Identity and Access Management For Modern Applications and Services

  

KeyCloak

• Spotbugs

  17 3,340 9.6 Java

  SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

  

SpotBugs

• falco

  42 6,895 9.8 C++

  Cloud Native Runtime Security

  

Falco

Suggest a related project