Frederik Braun
where else to find them
what they talk about
where they keep going back
no series more than once — all 3 in the filters
on a stage with
never shared a talk
who talks about the same things
- Martin Johns14 talks
- Sebastian Lekies8 talks
- Ben Stock16 talks
- Mike West7 talks
- Mario Heiderich9 talks
- Gareth Heyes5 talks
| title | conference | date |
|---|---|---|
| Finding and Fixing DOM-based XSS - with Static Analysis | JSCAMP Virtual 2021 | 2021-07-15 |
Static analysis via an eslint rule flags DOM sinks (assignments to innerHTML/outerHTML, insertAdjacentHTML, document.write) and treats sanitizer calls and… | ||
| Using A JavaScript CDN That Can Not XSS You - With Subresource Int... | OWASP AppSec Research (AppSecEU) 2015 | 2015-05-19 |
Proposes using subresource integrity to stop compromised CDNs from injecting XSS by verifying exact hash digests (sha256/384/512) before execution, shows the… | ||
| We're struggling to keep up | JSConf EU 2014 | 2014-09-13 |
Claims that XSS has been the dominant web vulnerability since about 2007 and that same-origin checks are inconsistently implemented drive the talk, with… | ||
| nothing matches | ||