The Hitchhiker's Guide to Client-Side Security
summary
Overview of client-side web security covering HTTPS, cross-site scripting (XSS) and cross-site request forgery (CSRF) threats, and concrete defenses against them. Highlights practical protections developers should apply in browser-facing code to keep sensitive information safe.
AI-written summary · about
chapters (8)
- 0:00Client-side security intro
- 3:09Cross-site scripting
- 13:14Cross-site request forgery
- 17:32Identity and auth
- 26:26Tokens vs cookies
- 31:09CORS and sharing
- 34:51Why HTTPS matters
- 39:56Q&A
related talks
01h 00mSafety not Guaranteed
55mWeb Application Security: Browsers Fight Back!
21mSecurity with HTTP headers: overview of attacks and defenses
30mSecurity with HTTP Headers: Overview of Attacks and Defenses
33mBulletproof Coding: Essential Security
24mTurn Your Browser into a Hacker Trap with HTTP Security Headers
37mFront-end Security
19mFrontend Security is a Thing