OWLOWASP Web Shield Library

Practical, reusable OWASP Top 10 security controls for modern JavaScript applications — a framework-agnostic core plus a full React adapter.

🗂️

OWASP-numbered modules

Every module maps directly to an OWASP Top 10 category (A01–A10), so security code speaks the same language your threat model does.

🔒

RBACManager and ACLManager compose through PermissionChecker with a deny-overrides policy engine — no ambiguous allow/deny ordering.

🌐

HTTPClient natively accepts an outboundRequestPolicy from SSRFGuard, so transport hardening and SSRF defense compose in one client.

🪪

SecurityLogger redacts secrets by field name and by value pattern (JWT-shaped strings) before anything reaches a sink.

⚛️

AuthGate, PermissionGate, and a full set of hooks and providers bring every core module into React with the same OWASP-numbered API.

✅

SecurityError / SecurityErrorCode gives every module a consistent, typed error surface across the whole library.