JavaScript attack surface
summary
Lists concrete exploits and fixes: demonstrates reflected XSS via query/body parameters and setTimeout-eval DOM XSS, stored XSS through unrestricted uploads, cache poisoning on Varnish that persists injected HTML, PDF/electron chains leading to local file read, SSRF or remote code execution, and prototype pollution that turns a recursive merge into arbitrary script loading via data: URIs. Shows tools and mitigations: CSP and Google CSP Evaluator, Untrusted Types, DOMPurify, postMessage origin checks, npm audit and npm scopes / resolution priorities to prevent dependency confusion.
AI-written summary · about
chapters (22)
- 0:00Introduction to JavaScript attack surface
- 0:24Impact of JavaScript vulnerabilities
- 1:16Reflected XSS explained
- 1:58Stored XSS and file uploads
- 2:41Cache poisoning attacks
- 4:29PDF and Electron XSS risks
- 4:50Preventing reflected and stored XSS
- 5:36Content Security Policy basics
- 6:58CSP evaluator and unsafe policies
- 7:40DOM-based XSS vulnerabilities
- 9:11Client-side template injection
- 10:28Safe template rendering methods
- 10:56DOM clobbering explained
- 13:13Finding DOM XSS with Untrusted Types
- 14:41PostMessage API security risks
- 16:35Securing PostMessage interactions
- 17:41Prototype pollution attacks
- 20:00Node.js prototype pollution severity
- 20:41Preventing prototype pollution
- 21:23Vulnerable dependencies risks
- 21:47Dependency confusion explained
- 22:52Q&A and closing remarks
related talks
34mJS Security - A Pentesters Perspective
32mWriting Secure JavaScript Code
41mXSS Horror Show
40mHostile JavaScript: Attacking and Defending the Browser
40mXXSS: Exotic Cross-Site Scripting vectors
01h 02meXential XSS (Cross Site Scripting)
33mHacking The Front-End
42mEverything you need to know about client-side malicious code execution