Download
H5SC, or the HTML5 Security Cheatsheet, is a public reference collection for researching browser-based cross-site scripting behavior. It catalogs HTML5-related XSS vectors so security professionals can compare how markup, browser features, and parsing behavior affect injection risks. The repository also includes supporting files intended for controlled XSS testing. A collection of lesser-known browser behaviors helps researchers investigate edge cases that ordinary checklists may miss. Redirect utilities cover several URI schemes and HTTP status codes used during security experiments. The material is published through the html5sec interface for easier browsing. It is intended for authorized testing, defensive research, and the validation of sanitizers and browser protections.
Features
- HTML5-related XSS vector catalogue
- Controlled browser security test files
- Lesser-known browser behavior references
- Multiple URI scheme experiments
- Configurable HTTP redirect utilities
- Online searchable cheatsheet interface
Project Samples
