JSFoo 2018
as the organisers put it
With JavaScript being used as much as it is talked about, JSFoo is certainly the most needed conference this year! The reasons for its popularity are also the reasons for its vulnerability (security-wise). Hence this edition will focus broadly on JavaScript and security.HasGeek hosted the first edition of JSFoo in 2011 to address the growing needs of a niche community working with Javascript. Since then, our JS community has grown tremendously. And this year, we’re meeting again on 26 – 27 October to explore new ideas and developments, to implement innovative solutions, and to learn from others’ experiences. Want to see the quality and topics of talks at last year’s conference? You can watch the JSFoo 2017 videos or the related ReactFoo 2017 videos to see what was on trend. Or check out the 2017 conference website.
who it's for
web application security engineers, frontend developers, Node.js developers, site reliability engineers, mobile app developers using JavaScript, engineering managers
topics
JSON Web Token security; OAuth2 consumption and serving; backend-for-frontend (BFF) design; DOM XSS mitigation and CSP; service workers for image delivery; GraphQL subscriptions and live queries; event-driven serverless backends; HTTP/2, tree-shaking and bundling; ReasonML to JavaScript via BuckleScript; Elm for robust frontends; RxJS for reactive features; Web Workers for graphical tasks
| title | author | length |
|---|---|---|
| Demystifying web application security | Shyam Seshadri | 35m |
Argues for replacing a laundry‑list of OWASP bugs with a trust‑first methodology that treats client input as untrusted, enforces role‑based authorization, and… | ||
| What makes JSON Web Tokens (JWT) secure? | Siddharth Kshetrapal | 34m |
Explains JWT as header payload signature, shows signing with HMAC SHA256 and recommends a 256‑bit secret, compares HS256 RS256 and ES256 and measures… | ||
| Authentication done right: consuming (and serving) Oauth2.0 | Arnav Gupta | 39m |
Your brand has multiple products on the web. They all need authentication. But obviously, you’d maintain a common authentication and user database.Also, in… | ||
| Building a secure BFF at Postman | Ankit Muchhala | 37m |
Postman describes building a public BFF that enforces principle of least privilege in access policies, pins dependency versions and runs Snyk and npm audit in… | ||
| Joint Q&A: Web application security | Shyam Seshadri, Siddharth Kshetrapal, Arnav Gupta, Ankit Muchhala | |
-- no description -- | ||
| Using Service Workers to improve dynamic image delivery in the browser | Rahul Nanwani | 37m |
As mobile data and mobile devices become more and more accessible in India, we need to build experiences not just for the high-end users but also vary our… | ||
| VueJS at Olacabs | Ashrith Kulai | 26m |
How we chose a framework for entire org of Olacabs.com. What frameworks did we consider? Why Did we chose VueJs? One Web - The wrapper around VueJS that helps… | ||
| Birds Of Feather session: AngularJS users | Vinci Rufus, Arjuna Suresh | |
-- no description -- | ||
| Architecture of scalable and resilient NodeJS apps with GraphQL & event-driven serverless | Shahidh K Muhammed | 39m |
Claim: combine Hasura GraphQL Engine subscriptions and live‑queries with event‑triggered serverless functions to make a reactive, async backend. Built a demo… | ||
| Birds Of Feather session: Vue in production -- user stories | Vidya Ramakrishna, Ashrith Kulai, Swapnil Agarwal, Rahul Kadyan | |
-- no description -- | ||
| The art of writing mature tests | Deepak Pathania | 39m |
As developers, we are all well aware of the importance of writing tests. Whether it is the safeguard against letting silly bugs slide in production code or… | ||
| Rethink Async | Hemanth HM | 26m |
Callback hell?Promises?Hmm, they are old, let us talk about async-await?!A computer polyglot CLI, web and unix philosophy ❤️’r.Contributes to FOSS via Github… | ||
| Birds Of Feather session: GraphQL | Kiran Abburi, Shahidh K Muhammed | |
-- no description -- | ||
| Everything you need to know about client-side malicious code execution | Lavakumar Kuppan | 42m |
Shows that DOM XSS is now the most common XSS in modern apps, demonstrates the hands‑on lab DomGoat for finding DOM sources and sinks, and claims practical… | ||
| The audit-driven approach to security design | Dominic Tarr | 31m |
Advocates an Audit Driven Security workflow: write audits that define intended and forbidden behaviors, then redesign until misuse chains disappear. Shows… | ||
| Joint Q&A" data leakages and privacy on the web" | Dominic Tarr, Lavakumar Kuppan | |
-- no description -- | ||
| ReasonML" Strict, powerful, and forgiving." | Hari Gowtham Gopal | 40m |
A password manager called Turaku gets rewritten using ReasonML compiled via BuckleScript into JavaScript with React and Electron on the front end and Ruby on… | ||
| Birds Of Feather session: Sensitive data leakage, data protection and privacy | Lavakumar Kuppan | |
-- no description -- | ||
| Building robust applications using Elm | Ritesh Pillai | |
At BigBinary, we are in the process of building AceHelp with the aim to provide contexutal help docs for websites and webapps. Contextual help takes into… | ||
| Sponsored talk" MySQL 8 loves JavaScript" | Sanjay Manwani | 30m |
MySQL 8.0 which has recently gone GA is now a fully functioning NoSQL and SQL database.The newly introduced X-Shell allows users to create interactive… | ||
| Web Workers " a graphical introduction" | Ritesh Kumar | 28m |
Thanks to the introduction of PWAs, the web is getting faster. But they can be improved further. This talk will focus on how we can use the power of web… | ||
| New kids in browserland | Swapnil Agarwal | 23m |
Swapnil will talk about some of the recent wonderful APIs that have been added to the browser such as,Intersection Observer API,Credential Management… | ||
| Quick fixes to improve page load time | Tejas Dinkar | 42m |
Lists concrete fixes and measured wins: use link headers / preload and HTTP/2 push to fetch critical JS early, run Chrome DevTools + Lighthouse and webpack… | ||
| Complex Features Made Easy With RxJS | Ben Lesh | 36m |
Angular + RxJS code adds an automatic polling reload via timer and a pull down to update UI that coordinates touchstart/touchmove/touchend events, HTTP (shared… | ||
| One code to rule them all - developing native Android / iOS app + Web App with a common codebase | Shyam Seshadri | |
-- no description -- | ||
| Writing the HasGeek app with NativeScript | Arnav Gupta | 07m |
-- no description -- | ||
| nothing matches | ||