When 3rd party JavaScript attacks (JS Party #336)
from JS Party: JavaScript, CSS, Web Development
Simon Wijckmans from c/side joins Jerod & Nick to discuss the Pollyfill attack in detail. What does it mean for web developers & client-side security going forward?
Embed this episode
Chapters
- 0:00 It's party time, y'all
- 0:56 Hello party people
- 1:23 Welcoming Simon
- 1:47 Hotlinking? Hotlinking!
- 2:56 The Polyfill attack
- 11:58 Nick gets called out
- 14:52 Sponsor: Wix
- 15:47 Reasonable risks
- 19:00 Trust? But, verify
- 20:49 How to verify
- 23:51 Mitigation techniques
- 25:50 Leading from the bottom
- 28:42 Nick gets more secure
- 29:32 What c/side offers
- 33:57 Jerod avenges Nick
- 38:22 Does c/side inject scripts?
- 39:49 What the browsers could do
- 44:43 Consider it cut
- 45:31 Doing better server-side
- 48:24 Ghoulish overkill
- 51:16 Closing time
- 51:49 Next up on the pod
No transcript yet.
Frequently asked questions
How long is this episode of JS Party: JavaScript, CSS, Web Development?
This episode is 53 minutes long.
When was this JS Party: JavaScript, CSS, Web Development episode published?
This episode was published on August 29, 2024.
Is there a transcript available for this episode?
Yes, a full transcript is available for this episode. You can read the complete transcript on the episode page.
Can I download this JS Party: JavaScript, CSS, Web Development episode?
Yes. Use the download control on the episode player to save the publisher-provided media file.