Explore dynamic analysis techniques for JavaScript applications in this JSConf.Asia 2018 talk by Inian Parameshwaran. Discover how to overcome the limitations of static analysis and gain more accurate insights into your web applications. Learn about meta-programming APIs, Proxies, overriding native DOM APIs, and using Immediately Invoked Function Expressions (IIFEs) to perform dynamic analysis. Understand the challenges involved and how to address them using Inian's open-source proxy module. Gain valuable knowledge on topics such as DOM-Based XSS, taint analysis, function reflection, and automatic transpilation for performance optimization. Delve into practical examples and key takeaways that will help you enhance the security and performance of your JavaScript applications.
Overview
Syllabus
Introduction
JavaScript Re-writing
Static analysis advantages
Dynamic analysis advantages
DOM-Based XSS
Taint Analysis
Inserting your analysis statements
Where to insert analysis statements?
Comma Operator
Immediately Invoked Function Expression (IFE)
Storing analysis information
Overloading operators in JavaScript?
Key takeaways
Function Reflection
How to re-write
The results
Rewriting JS for performance
Automatic transpilation by Dexecure
Taught by
JSConf
