Web Application Security Working Group - Tools
- Issue Tracking
- Issue Dashboard
- Mailing List
- member-webappsec Restricted archives
- public-webappsec
- Other
- Minutes through ~2017
GitHub repositories
-
federated-credentials
-
password-credentials
-
-
permissions-registry
Registry of known powerful features in the web platform.
-
trusted-types
A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.
-
-
webappsec-change-password-url
A Well-Known URL for Changing Passwords
-
-
-
-
-
-
-
webappsec-dbsc
Device Bound Session Credentials: A Protocol for Protecting From Cookie Theft
-
-
-
webappsec-passkey-endpoints
A well-known URL for passkey relying party endpoints
-
webappsec-permissions-policy
A mechanism to selectively enable and disable browser features and APIs
-
-
-
-
webappsec-standardizing-security-semantics-of-cross-site-cookies
A WebAppSec note on standardizing the security semantics of cross-site cookies and proposes standardizing these semantics.
w3c/webappsec-standardizing-security-semantics-of-cross-site-cookies
-
-
-
webappsec-uisecurity
User Interface Security and the Visibility API
-
webappsec-upgrade-insecure-requests
WebAppSec Upgrade Insecure Requests
-