search

dcjs / talks

Talking at dcjs
20 stars 6 forks source link

Linting your XSS troubles away #64

Closed oliikit closed 5 years ago

oliikit commented 5 years ago

Your Name: Olivia Brundage Your twitter handle: @oliikit
A few words about yourself: I'm a Security Engineer at Mapbox where I secure and maintain availability on our cloud infrastructure. I write mostly JavaScript these days, a big videogame nerd, and have two adorable cats. 🤓 (And of course, Star Trek > Star Wars. 💥)

Talk title: Linting your XSS troubles away

Talk abstract:
Cross-site scripting (XSS) is one of the most popular, and potentially most damaging, client-side attack vector - and it's one of the easiest to prevent. XSS happens because data isn't properly validated and sanitized. As it turns out, especially with JavaScript, the correct design pattern in handling any sort of data can be checked to prevent XSS attacks. Within this talk, you will see various demos of XSS attacks (like DOM-based and reflected) and be introduced to tools that can help you combat and prevent this vulnerability from happening through the use of an eslint plugin. Don't use eslint plugin? That's fine! We'll go over different tools that do the job. I will demonstrate how we've implemented this tool into our code pipeline at Mapbox, so that you can be confident, like us, in deploying XSS free code.

Expected length: 20-40 minutes; rather flexible on time frame.

Available months:

We meet on the second Thursday of the month generally. You can use this handy-dandy list to check dates:

jakerella commented 5 years ago

Thanks @oliikit! We'll get the meetup event posted for December 13 up after this week's meetup. Looking forward to it!

adunkman commented 5 years ago

This talk looks really cool. 🙂

jakerella commented 5 years ago

Hey @oliikit! Are you set for Thursday? I won't actually be in town sadly, but @elgreg, @asabaylus, and @lizafloyd will be there (or, at least 2 of them ;) ).

Also, please be sure to register for the event (and spread the word)! https://www.meetup.com/DC-JavaScript/events/256721171/

asabaylus commented 5 years ago

If you need anything just ping us.

Asa

Sent from my iPad

On Dec 9, 2018, at 4:38 PM, Jordan Kasper notifications@github.com wrote:

Hey @oliikit! Are you set for Thursday? I won't actually be in town sadly, but @elgreg, @asabaylus, and @lizafloyd will be there (or, at least 2 of them ;) ).

Also, please be sure to register for the event (and spread the word)! https://www.meetup.com/DC-JavaScript/events/256721171/

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or mute the thread.

oliikit commented 5 years ago

Thank you, @asabaylus and @jakerella! I should be all good to go. 🤗

robbiethegeek commented 5 years ago

Was a super successful talk