All Your Browsers Are Belong to Me
Explore browser control techniques and innovative web development strategies in this engaging JSConf presentation by James Coglan.
XSS - No, the Other "S"
Explore the often-overlooked dangers of cross-site styling attacks, their potential for data exfiltration, and strategies to protect your websites and applications from these CSS-based vulnerabilities.
Towards a Post-XSS World
Explore Content Security Policy as a powerful tool to combat cross-site scripting attacks, enhancing web application security and regaining control over your code execution environment.
Keeping Secrets with JavaScript - An Introduction to the WebCrypto API
Explore the Web Cryptography API, its implementation, and potential for browser-based encryption. Learn about NaCl-inspired API and the future of web security.
We're Struggling to Keep Up
Explore browser security challenges in modern web apps, covering current models, recent features, and potential enhancements, with insights on bypassing security mechanisms.
HTTP Headers - The Simplest Security
Explore essential HTTP security headers like Content-Security-Policy and Strict-Transport-Security. Learn implementation, browser support, and best practices for protecting web applications.
Security in the World of JS Frameworks
Explore security challenges in modern JS frameworks, common vulnerabilities, and best practices for building safer web applications from a security engineer's perspective.
How to Deal with 3rd Party JS
Explore techniques for managing third-party JavaScript to maintain performance and user experience in modern websites, diving into lesser-known aspects of the language.
Making the Jump - How Desktop-Era Frameworks Can Thrive on Mobile
Explore how desktop-era frameworks adapt to mobile constraints, optimizing performance and user experience for smartphones while building better apps for all platforms.
Browser Security in 2017
Explore modern browser security challenges and solutions in this insightful talk on web vulnerabilities, attack vectors, and protective measures for developers.
You Use Content Security Policy, Don't You?
Learn how Content Security Policy can protect your website from XSS and other attacks. Discover its workings, implementation, and real-world examples through live coding demonstrations.
Performing Dynamic Analysis of JS Apps
Explore dynamic JavaScript analysis techniques for enhanced web security and performance, including DOM manipulation, proxies, and IIFEs, with practical demonstrations and open-source tools.
Introduction to Web Security
Explore essential web security concepts and best practices to protect your applications from common vulnerabilities and attacks.
Securing Your Site Like It's 1999
Explore early web security challenges, from HTML issues to forum takeovers. Learn valuable lessons about navigating a world eager to exploit mistakes in online platforms.
Raiders of the Javascript-based Malware
Explore the design and operation of Javascript-based ransomware and cryptojacking malware, uncovering implementation intricacies and modern malware techniques.
JavaScript's Journey to the Edge
Explore JavaScript's evolution from browser to server-side, and now to edge computing. Learn about V8 engine's capabilities and the potential revolution in web computation.
HTTP Headers for the Responsible Developer
Explore HTTP headers' impact on user experience, accessibility, and performance for building inclusive websites. Learn to enhance UIs beyond code.
No Way, JOSE - Understanding Javascript Object Signing and Encryption
Demystifying cryptography basics and JOSE framework for secure web data transfer, focusing on encryption, hashing, and digital signatures using JavaScript examples.
No Way, JOSE!
Explore cryptography basics and JOSE framework for secure data transfer. Learn about encryption, hashing, JWE, and JWK through simple examples, making complex concepts accessible.
Managing Enterprise and Consumer Identity with Azure Active Directory
Explore Azure AD's identity management capabilities for enterprises and consumers, covering B2B collaboration, B2C scenarios, and custom user experiences with social identity integration.
Let's Talk Auth
Explore authentication and authorization across platforms, including web, apps, and APIs. Learn best practices for centralized auth systems using JWT, OWIN, and WebAPI2.