Top 5 allowlist Open-Source Projects
-
-
bluemonday
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
I'm on the receiving end of donations from sourcegraph for this. It's around $10 per month from that single donation and is for the only Go HTML santizer, which you use when you have user generated / untrusted input that you need to display as HTML. https://github.com/microcosm-cc/bluemonday
For me the library has been good enough for my own use for a very very long time. I mostly neglect it unless there's some critical issue. I don't improve it at all as my time is better spent on my day job.
I've often thought that there's room for improvement such as a DOM style santizer to validate input rather than just a SAX style sanitizer, perhaps formatting of output in addition to sanitising input, transformation rules, etc.
When I got the donation I was surprised, first ever bit of support for open source software I'd written (as this was not written on company dime).
Even at $10 per month it's motivating enough to think someone values it. If it accrues into something significant I may actually feel motivated to improve it.
Interesting is that I'd regard this as successful by usage, it's used by virtually everything in the Go world that makes a website.
Perhaps people don't know it exists though? And for that awareness thanks to thanks.dev
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
-
Project mention: API to check if an email address is from a disposable email service | /r/programming | 2023-12-09
The block list seems to come from https://github.com/disposable-email-domains/disposable-email-domains/ — I think you should cite your sources even if it’s distributed as public domain
-
Would recommend finding a good Allowlist as many contain domains such as these that are needed for websites to function, I would recommend this one: https://github.com/hl2guide/AdGuard-Home-Whitelist
-
traefik-geoip-filter
A docker container that acts as a GeoIP allow/blocklist for Traefik. Not a plugin.
traefik-geoip-filter - A small project I made, somebody might find it useful.
-
WorkOS
The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
Index
What are some of the best open-source allowlist projects? This list will help you:
Project | Stars | |
---|---|---|
1 | santa | 4,288 |
2 | bluemonday | 2,950 |
3 | disposable-email-domains | 2,169 |
4 | AdGuard-Home-Whitelist | 161 |
5 | traefik-geoip-filter | 8 |