The web is broken: let's fix it!
summary
The talk describes modern browser security features that address long-standing web platform problems like XSS, CSRF, XSSI and cross-site leaks. It explains concrete defenses and how to apply them so adding security to web applications becomes easier and less error-prone.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 1:15Web vulnerabilities and XSS
- 8:51Content Security Policy
- 13:52Mitigations and hardening
- 24:59CSRF and Spectre
- 34:34CORS
- 41:17Additional protections and privacy
- 46:28Q&A
related talks
33mSecurity is Broken: Understanding Common Vulnerabilities
37mFront-end Security
01h 04mWeb Security And You
24mWe're struggling to keep up
55mWeb Application Security: Browsers Fight Back!
41mWeb Security
50mModern WebApp Vulnerabilities
45mWeb application security - A tale of security, betrayal and revenge