Explore the OWASP Top 10 vulnerabilities specifically tailored for JavaScript developers in this informative conference talk from OWASP Global AppSec Tel Aviv. Delve into both client-side and server-side JavaScript security issues, focusing on modern frameworks like Angular, React, Vue, and Node.js. Learn about injection attacks, broken authentication, access control problems, and cross-site scripting (XSS) vulnerabilities. Discover practical prevention techniques, including Content Security Policy (CSP) implementation and secure configuration practices for Node.js. Gain valuable insights from Lewis Ardern, a Senior Security Consultant at Synopsys, as he bridges the gap between traditional OWASP documentation and the evolving JavaScript ecosystem.
Overview
Syllabus
Introduction
One Injection
MongoDB Example
Prevent Mongo Injection
Relational Databases
Info Prevention
Broken Authentication
Authentication
XML
Brokering Access Control
Nodejs Configuration
Execution context
DOM XSS
Framework XSS
ElementRef
Prevention
CSP
Mitigation Techniques
Taught by
OWASP Foundation
