Building Secure ReactJS Apps: Mastering Advanced Security Techniques
summary
Shows how AI prompt engineering produces secure React code: capture precise rules, feed them to models, iterate until prompts enforce low cyclomatic and cognitive complexity and high cohesion. Demonstrates finishing a yearlong project in a week using four AI engines and specific secure prompts. Covers concrete defenses: sanitize HTML with DOMPurify, validate URLs to https and deny javascript: schemes, use CSS Escape for styled-components, serialize embedded JSON instead of JSON.stringify, avoid dangerouslySetInnerHTML, and scan deps with retire.js and npm audit while using ESLint.
AI-written summary · about
chapters (18)
- 0:00Intro
- 2:28Agenda
- 3:11AI secure code generation lifecycle
- 7:03What is React & what are the top security domains
- 8:31R1: Cross site scripting
- 11:47React security domains
- 11:58R1: XSS
- 16:48R2: Dangerous URLs
- 20:54R3: Rendering HTML
- 23:56R4: Securing JSON
- 25:49R5: Dangerous styles
- 27:47R6: Insecure native DOM access
- 30:04R7: Access control & exposed failures
- 35:35R8: Vulnerable & outdated versions & dependencies
- 37:43R9: Open redirects
- 39:09R10: Insecure server-side rendering
- 40:32Demo
- 42:16Outro
related talks
56mBuilding Secure ReactJS Applications: Mastering Advanced Security Techniques
01h 00mSecuring React: Prompt Engineering for Robust and Secure Code Generation
54mArchitecting Fortresses: A Deep Dive into Advanced Security Measures for ReactJS Apps
08mHack Proofing Your JavaScript A Fun And Engaging Guide To Enhancing Security
50mBuilding Secure React Applications
42mYou thought your React application is secure? Think again
58mPractical Secure Development and Operations with JavaScript in 2020
59mReact AI