Web dev security school (JS Party #293)
from JS Party: JavaScript, CSS, Web Development
This week, we're joined by Ron Perris, a Security Engineer at Reddit and software security enthusiast. Together, we dive into best practices and common pitfalls, covering topics from dangerous URLs to JSON injection attacks. Tune in for an educational conversation, and don’t forget to bring your notebooks!
Embed this episode
Chapters
- 0:00 It's party time, y'all
- 0:39 Sponsor: Convex
- 4:10 Welcoming Ron Perris
- 4:46 Ron's background
- 14:55 NodeJS Security Working Group
- 23:47 Sponsor: Appwrite
- 26:35 Where to get started with security
- 34:17 String injectiony stuff
- 39:42 XSS protection
- 43:40 URL-based script injection
- 50:41 Who's responsible for security?
- 52:38 Sponsor: Changelog News
- 54:19 On security teams
- 58:00 On project security
- 59:51 Sanitize & render HTML
- 1:04:45 Secure server-side rendering
- 1:05:55 Avoid JSON injection attacks
- 1:08:50 User linter configs
- 1:10:54 Thomas Eckert's question
- 1:13:57 Why aren't people taught this?
- 1:16:10 The Loco Moco conference
- 1:17:14 Frontend vs backend security
- 1:24:14 Connecting with Ron
- 1:25:45 Next up on the pod (Join ++!)
No transcript yet.
Frequently asked questions
How long is this episode of JS Party: JavaScript, CSS, Web Development?
This episode is 1 hour and 26 minutes long.
When was this JS Party: JavaScript, CSS, Web Development episode published?
This episode was published on September 21, 2023.
Is there a transcript available for this episode?
Yes, a full transcript is available for this episode. You can read the complete transcript on the episode page.
Can I download this JS Party: JavaScript, CSS, Web Development episode?
Yes. Use the download control on the episode player to save the publisher-provided media file.