I Run Code From the Internet!
watch on portal.gitnation.org ↗https://portal.gitnation.org/contents/i-run-code-from-the-internetsummary
Covers how JavaScript projects can be compromised via supply-chain attacks and demonstrates defensive techniques to sandbox dependencies. Shows approaches for restricting globals per package, controlling network and filesystem access, and preventing install scripts and prototype pollution in npm-based projects.
AI-written summary · about
related talks
52mBest Practices for Developers to Master Security
45mSecurity When Working with npm: Threats, Cases and Stories
40mHostile JavaScript: Attacking and Defending the Browser
42mSecuring Your Software Supply Chain
58mPractical Secure Development and Operations with JavaScript in 2020
53mArchitecting Robust JavaScript Applications
23mProtecting Your npm Dependencies
29mAll your packages are belong to us - Protecting your npm dependencies