Jasvir Nagra is a founder and software security architect with over 18 years of experience turning legacy systems into high-performance, secure platforms. He helped design secure programming language features (influencing strict-mode JavaScript), led Google Caja and core sanitization work used across Google products, and contributed to prominent open-source security tooling. Jasvir is the co-author of Surreptitious Software, holds ten patents in security and language design, and has published widely on obfuscation and software protection. He blends academic rigor—a PhD-trained background and postdoc experience—with hands-on product delivery that has driven revenue and shipped security products across startups and major tech firms. Based in Redwood City, he also advises commercial protection vendors and speaks regularly at Black Hat, BSides and OWASP, often solving “impossible” problems that move from prototype to production.
18 years of coding experience
12 years of employment as a software developer
PhD Computer Science, PhD Computer Science at The University of Auckland
Caja is a tool for safely embedding third party HTML, CSS and JavaScript in your website.
Role in this project:
Back-end Developer & Security Engineer
Contributions:576 commits, 1 PR, 5 comments in 5 years 2 months
Contributions summary:Jasvir primarily contributed to the Caja project by working on the CSS and HTML sanitization components. Their work involved fixing parsing issues related to CSS gradients and IE conditional comments, improving the handling of inline styles, and ensuring the correct rendering of document types. Furthermore, they made changes to address security vulnerabilities, such as removing the ability for links to open in new pages.
Contributions:1 push, 1 branch, 1 issue in 4 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.