Loading…
BSidesSF 2022 has ended
Back To Schedule
Sunday, June 5 • 4:30pm - 5:20pm
XSS mitigation: the state of the art

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Tweet Share
Feedback form is now closed.
XSS attacks and mitigations are complex. Between CSPv3, Trusted Types, Strict Dynamic, CORP, and CORB, it's a lot to take in. In this talk, we'll cover what you need to know in order to implement efficient XSS defences at every layer.
Speakers
JA

Jean-Baptiste Aviat

Datadog
Jean-Baptiste Aviat is AppSec staff engineer at Datadog, former CTO and co-founder at Sqreen. He spent half a decade hunting security bugs at Apple, helping developers fix them, and developing protections used by millions of devices. He's the host of the appsecbuilders.com podcast... Read More →
avatar for Vladimir de Turckheim

Vladimir de Turckheim

Datadog
Vladimir (he/him) is a software engineer focusing on Application Security at Datadog. He has been working on Node.js security for 5 years and now focuses on Web quality and security at large. Vladimir is in charge of the Node.js bug bounty program.

Sunday June 5, 2022 4:30pm - 5:20pm PDT
Theater 15
  Talk