Secure Web Applications with Clojure
summary
Shows how to build more secure web applications in Clojure by using concrete libraries and patterns rather than magic. Covers an HTTP stack built with Ring and Compojure for middleware and routing, input validation with Bouncer, HTML templating with Selmer (avoiding unescaped Hiccup), CSRF protection via Ring middleware, SQL access through a JDBC wrapper, and authentication/authorization with Buddy; also discusses HSTS, CSP and other security headers, sensible limits, and CSV-injection checks.
AI-written summary · about
chapters (15)
- 0:00Intro
- 1:48Clojure Crash Course
- 4:24Some Advisories
- 5:49CSV Injection Example / HTML Injection
- 15:11Ecosystem Overview
- 17:19Validate Input - Escape Output
- 23:07SQL Injection
- 23:43Parameterize SQL Queries
- 25:25Introducing Buddy
- 26:28Buddy-Auth Ring Middleware Integration
- 27:49Simple Auth Example
- 29:09Authorization with Buddy
- 30:19Auth Middleware
- 34:19Better - Sensible Defaults
- 39:35Content Security Policy HTTP Header
related talks
32mSimple AND Secure?
31mclojure.web/with-security
40mModern Web Application Defense with OWASP Tools
31mRails Application Security in Practice
18mWriting an (in)secure webapp
32mSecurity-First Web Apps
34mWeb security explored through horror movies
54mScala Security: Examining the Play and LiftWeb Frameworks