Content Security Policy (CSP) Courses and Certifications

OWASP Foundation

Don't Trust the DOM - Bypassing XSS Mitigations via Script Gadgets

Explores novel XSS attack technique using script gadgets to bypass mitigations, demonstrating vulnerabilities in modern JavaScript libraries and advocating for preventive security measures.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

media.ccc.de

Breaking Microsoft Edge Extensions Security Policies

Uncover vulnerabilities in Microsoft Edge extensions, exploring permission bypasses, data theft, and security policy breaches. Learn about browser extension security and its impact on user privacy.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

LASCON

Fixing XSS with Content Security Policy

Explore Content Security Policy (CSP) as a defense against XSS attacks, comparing CSP 1.0 and 2.0, and learn implementation strategies for enhanced web application security.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

OWASP Foundation

OWASP Top 10 for JavaScript Developers

Explore JavaScript vulnerabilities in OWASP Top 10, covering client and server-side issues with focus on modern frameworks and NodeJS. Learn prevention techniques for secure web development.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Devoxx

Getting Single Page Application Security Right

Explore SPA security challenges and solutions, covering XSS, CSP, session management, and CSRF in RESTful APIs. Learn practical strategies for building secure web applications using modern frameworks.

• YouTube
• 2 hours 11 minutes
• On-Demand
• Conference Talk

Devoxx

Are You Botching the Security of Your AngularJS Application

Discover AngularJS's built-in security features and learn how to leverage them effectively. Explore protection against XSS, CSP implementation, and CSRF prevention for safer web applications.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

NDC Conferences

Modern Security Standards

Explore modern web security standards, cutting through acronyms to understand powerful features that enhance protection and simplify implementation for developers.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

NDC Conferences

The Last XSS Defense Talk

Comprehensive exploration of modern XSS defense strategies, covering JavaScript frameworks, CSP deployment, HTML sanitization, and design considerations for building secure web applications.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Black Hat

Dissecting CSRF Attacks & Countermeasures

Explore CSRF attacks, current countermeasures, and a proposed header-based policy for improved web security. Learn detection techniques and a new concept called Storage Origin Security for simplified protection.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Devoxx

Browser Security and HTTP Headers - Attacks and Protections in Action

Explore browser vulnerabilities and learn to mitigate attacks using HTTP security headers like CSP, HSTS, and CORS through live demonstrations and practical examples.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

JSConf

HTTP Headers for the Responsible Developer

Explore HTTP headers' impact on user experience, accessibility, and performance for building inclusive websites. Learn to enhance UIs beyond code.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

OWASP Foundation

New Web Platform Security Features to Protect Modern Web Applications

Explore modern web browser security features to protect against XSS, CSRF, and clickjacking. Learn about CSP3, Trusted Types, Fetch Metadata Request Headers, CORP, and COOP for enhanced application security.

• YouTube
• 30 minutes
• On-Demand
• Free Online Course