Warning Ahead: Security Storms are Brewing in Your JavaScript
summary
Covers security weaknesses in JavaScript and HTML5, showing how client-side JavaScript flaws can be leveraged to steal server-side data and deliver malware. Details a new class of JavaScript-specific vulnerabilities, problems arising from third-party platforms when exploited via JavaScript, and security issues introduced by HTML5 features.
AI-written summary · about
chapters (13)
- 0:00Start
- 2:51SOP
- 4:26Markets
- 5:22Sandbox concept
- 5:49Sandbox syntax
- 9:57Don't just count on Sandbox!
- 10:48Canvas
- 11:32Monster XSS - Attack Steps
- 13:59Monster XSS - The result
- 15:07Monster XSS - bottom line
- 15:55Web Socket
- 18:57Pacman - winning the odds
- 19:36Packman Demo
related talks
01h 00mSafety not Guaranteed
40mHostile JavaScript: Attacking and Defending the Browser
53mA look at how hackers use JS
08mHack Proofing Your JavaScript A Fun And Engaging Guide To Enhancing Security
32mWriting Secure JavaScript Code
36mHTML5 JS Security
59mWeb Application Security Trends
58mPractical Secure Development and Operations with JavaScript in 2020