So Long, and Thanks for Nothing! The Demise of Cross-Site Scripting

Christian Wenz

Saturday 18 November 2023 from 15:30 to 16:30

Talk in English - UK at PHPCon Poland 2023
Track Name: Green Path
Short URL: https://joind.in/talk/0f48c (QR-Code (opens in new window))

For almost 25 years, almost as long as there is PHP, cross-site scripting (XSS) has been one of the most common risks for web applications. Yet today, there are many ways to protect a web application from attacks, including browser features, HTTP headers, and special APIs. This talk discusses why XSS is dangerous and covers countermeasures including Content Security Policy, Trusted Types API, and protection in SPA frameworks. After this talk, there's (almost) no excuse to get XSS.

Comments

Comments are closed.