weizman

awesome-javascript-anti-debugging

javascript based browser anti debugging techniques resources

awesome-javascript-realms-security

javascript realms security resources

ProtoTree

Use ProtoTree to visually view the entire javascript prototype chain as a tree!

ledger-hack-lab

having a look at the ledger hack from today

Realms-Initialization-Control

WIP explainer for RICA (Realms Initialization Control API) proposal

CVE-2023-1767

DOM-Clobbering-Protection-JavaScript-Shim-PoC

fight dom clobbering

shield

Shield your DOM against clobbering attacks effortlessly

awesome-opensource-israel

A curated list of Israeli-made projects, events, and individuals

CSPer

A clean page that dynamically sets CSP on demand for testing

endo

Endo is a distributed secure JavaScript sandbox, based on SES

extension-port-stream

A module for creating a node style stream over a WebExtension port object.

firefox-shadow-dom-selection-leak-demo

demonstrate bug in firefox browser where dom nodes of closed shadow roots can be leaked via getSelection API

Gal-And-Naama

LavaDome

Secure DOM trees isolation and encapsulation leveraging ShadowDOM

LavaMoat

tools for sandboxing your dependency graph

metamask-extension

weizman metamask fork

offscreen-extension-test

post-message-stream

Sets up a duplex object stream over window.postMessage

react-compartment

forked from https://github.com/kumavis/react-compartment/ by @kumavis

redirect-away-challenge

requiree

Optionally export modules with development properties

secure-the-web-forward-workshop

Materials for a proposed W3C workshop "Secure the Web Forward"

SES

experiment with SES

snaps-monorepo

Monorepo for Snaps dependencies.

snow

keeping a fork of my original development of snow

test

things i need served on http/https for tests

trezor-suite

:candy: Trezor Suite Monorepo

website

source code of http://weizmangal.com

weizman.github.io

A brazen two-column theme for Jekyll.