YoVDO

OWASP Top 10 for JavaScript Developers

Offered By: OWASP Foundation via YouTube

Tags

Conference Talks Courses Javascript Courses MongoDB Courses Relational Databases Courses Cross-Site Scripting (XSS) Courses Web Security Courses Access Control Courses Injection Vulnerabilities Courses Broken Authentication Courses Content Security Policy (CSP) Courses

Course Description

Overview

Explore the OWASP Top 10 vulnerabilities specifically tailored for JavaScript developers in this informative conference talk from OWASP Global AppSec Tel Aviv. Delve into both client-side and server-side JavaScript security issues, focusing on modern frameworks like Angular, React, Vue, and Node.js. Learn about injection attacks, broken authentication, access control problems, and cross-site scripting (XSS) vulnerabilities. Discover practical prevention techniques, including Content Security Policy (CSP) implementation and secure configuration practices for Node.js. Gain valuable insights from Lewis Ardern, a Senior Security Consultant at Synopsys, as he bridges the gap between traditional OWASP documentation and the evolving JavaScript ecosystem.

Syllabus

Introduction
One Injection
MongoDB Example
Prevent Mongo Injection
Relational Databases
Info Prevention
Broken Authentication
Authentication
XML
Brokering Access Control
Nodejs Configuration
Execution context
DOM XSS
Framework XSS
ElementRef
Prevention
CSP
Mitigation Techniques


Taught by

OWASP Foundation

Related Courses

Internet History, Technology, and Security
University of Michigan via Coursera Client-Server Communication
Google via Udacity HTTP & Web Servers
Udacity Network Security
Georgia Institute of Technology via Udacity Web Security Fundamentals
KU Leuven University via edX