Browser Security and HTTP Headers - Attacks and Protections in Action

Explore browser security and HTTP headers in this 48-minute conference talk by Mathieu Humbert at Devoxx. Discover how critical HTTP security headers are in protecting browsers from various attacks, including CSRF, XSS, and XS-Leaks. Learn about the effectiveness of headers like CSP, HSTS, COxP, and CORS in mitigating client-side vulnerabilities. Through practical demonstrations, witness the ease of exploiting these vulnerabilities and understand the importance of implementing proper HTTP headers for enhanced browser security. Gain valuable insights into both attack techniques and protective measures in this engaging and informative session.