YoVDO

OWASP Top 10 for JavaScript Developers

Offered By: OWASP Foundation via YouTube

Tags

Conference Talks Courses Javascript Courses MongoDB Courses Relational Databases Courses Cross-Site Scripting (XSS) Courses Web Security Courses Access Control Courses Injection Vulnerabilities Courses Broken Authentication Courses Content Security Policy (CSP) Courses

Course Description

Overview

Explore the OWASP Top 10 vulnerabilities specifically tailored for JavaScript developers in this informative conference talk from OWASP Global AppSec Tel Aviv. Delve into both client-side and server-side JavaScript security issues, focusing on modern frameworks like Angular, React, Vue, and Node.js. Learn about injection attacks, broken authentication, access control problems, and cross-site scripting (XSS) vulnerabilities. Discover practical prevention techniques, including Content Security Policy (CSP) implementation and secure configuration practices for Node.js. Gain valuable insights from Lewis Ardern, a Senior Security Consultant at Synopsys, as he bridges the gap between traditional OWASP documentation and the evolving JavaScript ecosystem.

Syllabus

Introduction
One Injection
MongoDB Example
Prevent Mongo Injection
Relational Databases
Info Prevention
Broken Authentication
Authentication
XML
Brokering Access Control
Nodejs Configuration
Execution context
DOM XSS
Framework XSS
ElementRef
Prevention
CSP
Mitigation Techniques


Taught by

OWASP Foundation

Related Courses

Complete Website Ethical Hacking and Penetration Testing
Udemy Website Hacking / Penetration Testing
Udemy Bug Bounty - Web Application Penetration Testing B|WAPT
Udemy ASP.NET Core: Security
LinkedIn Learning Advanced Cyber Security Training: OWASP Top 10 and Web Application Fundamentals
EC-Council via FutureLearn