w3c/webappsec-csp

WebAppSec Content Security Policy

224

stars

829

commits

HTML

primary language

Aug 13, 2026

updated

w3c.github.io/webappsec-csp/

README

Content Security Policy

CSP 3 is being specified in index.bs (published at https://www.w3.org/TR/CSP3/)

CSP 2 is published as a CR at https://www.w3.org/TR/CSP2/.

CSP 1 is published as a Note at https://www.w3.org/TR/2012/CR-CSP-20121115/

Contributors

(top 30 of 71)

541 commits

57 commits

42 commits

24 commits

Similar repos

w3c/webappsec-credential-management

WebAppSec Credential Management

shared contributors

w3c/webappsec-trusted-types

A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.

662

shared contributors

w3c/webappsec-permissions-policy

A mechanism to selectively enable and disable browser features and APIs

430

shared contributors

w3c/webappsec-feature-policy

A mechanism to selectively enable and disable browser features and APIs

430

shared contributors

w3c/trusted-types

A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.

662

shared contributors

w3c/DOM-Parsing

DOM Parsing and Serialization

shared contributors

w3c/webcrypto

The W3C Web Cryptography API

294

same org

google/strict-csp

Languages

HTML

86.7%

Bikeshed

11.9%

CSS

1.3%

w3c/webappsec-csp

WebAppSec Content Security Policy

224

stars

829

commits

HTML

primary language

Aug 13, 2026

updated

w3c.github.io/webappsec-csp/

README

Content Security Policy

CSP 3 is being specified in index.bs (published at https://www.w3.org/TR/CSP3/)

CSP 2 is published as a CR at https://www.w3.org/TR/CSP2/.

CSP 1 is published as a Note at https://www.w3.org/TR/2012/CR-CSP-20121115/

Similar repos

w3c/webappsec-credential-management

WebAppSec Credential Management

shared contributors

w3c/webappsec-trusted-types

A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.

662

shared contributors

w3c/webappsec-permissions-policy

A mechanism to selectively enable and disable browser features and APIs

430

shared contributors

w3c/webappsec-feature-policy

A mechanism to selectively enable and disable browser features and APIs

430

shared contributors

w3c/trusted-types

A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.

662

shared contributors

w3c/DOM-Parsing

DOM Parsing and Serialization

shared contributors

w3c/webcrypto

The W3C Web Cryptography API

294

same org

google/strict-csp

Contributors

(top 30 of 71)

541 commits

57 commits

42 commits

24 commits

Languages

HTML

86.7%

Bikeshed

11.9%

CSS

1.3%