This talk was recorded at NDC Security in Oslo, Norway. #ndcsecurity #ndcconferences #security #developer #softwaredeveloper
Attend the next NDC conference near you:
https://ndcconferences.com
https://ndc-security.com/
Subscribe to our YouTube channel and learn every day: @NDC
Follow our Social Media!
https://www.facebook.com/ndcconferences
https://twitter.com/NDC_Conferences
https://www.instagram.com/ndc_conferences
#applicationsecurity #javascript
If your website includes third-party JavaScript, you are running code you probably haven’t reviewed, can’t inspect in production, and don’t control when it changes. That code runs with full access to the DOM, user data, authentication state, business logic, and more.
This session explores the risk of what that really means and what can go wrong. You can’t secure what you can’t see — but the browser can.