The Most Secure Framework
summary
Talk examines web-framework security by comparing how different frameworks handle common vulnerabilities and developer mistakes, aiming to separate myths from real protection. It looks at concrete security features and trade-offs of specific frameworks to determine which provide the strongest practical defenses.
AI-written summary · about
chapters (21)
- 0:00Introduction
- 1:27Digital anarchy and XSS history
- 3:14XSS mechanics and browser protection
- 8:27Vue security and text interpolation
- 9:32VHTML vulnerability in Vue
- 12:39Navigate to vulnerability in Next.js
- 15:06Prototype pollution in Vue and i18n
- 17:13Regex and DoS in HTML Parser
- 20:02URL injection and open redirects
- 21:28Cross-User State Pollution and data leaks
- 22:30React security and Dangerously Set innerHTML
- 23:34DOMPurify vulnerabilities and reflected XSS
- 24:35Authorization bypass in Next.js
- 25:59React PDF library vulnerability
- 27:45Angular security checks
- 28:05Server-Site Request Forgery in Angular SSR
- 29:50Race condition in Angular
- 31:15Frameworks as unreliable fortresses
- 32:20Developer's role in security
- 35:12Summary of framework security
- 36:37Q&A
related talks
34mHow Do JavaScript Frameworks Impact The Security Of Applications?
53mThe web is broken: let's fix it!
46mPredictive Security Architecture
23mWeb Application Security - owasp top 10 vulnerabilities
15mSafety Not Guaranteed
42mSession Security in Web Applications
37mOut-of-the-Box security
54mScala Security: Examining the Play and LiftWeb Frameworks