World Congress 2024 • Aug 20, 2024 • Session details

Cross Site Scripting is yesterday's news, isn't it?

Think modern frameworks cured XSS? They haven't. Learn how to lock down your application against native DOM bypasses using strict CSPs and Trusted Types.

Starting at 27:16 · Watch from the beginning

Cross Site Scripting is yesterday's news, isn't it? thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

1:05 min

Handling modern injection flaws and cross-site scripting

Christian Wenz

Christian Wenz · World Congress 2026 Europe

1:35 min

Enhancing core browser security with the native HTML Sanitizer API

Chris Heilmann

Chris Heilmann +2 · LIVE

1:44 min

Evaluating framework architectures against cross-site scripting attack vectors

Philippe De Ryck · LIVE

4:58 min

Dealing with cross-site scripting in single page applications

Thomas Konrad · LIVE

1:43 min

Stopping cross-site scripting attacks via secure HTML types

Michael Koppmann · LIVE

2:07 min

Understanding classic XSS risks in reactive frontend frameworks

Ramona Schwering

Ramona Schwering · World Congress 2026 Europe

More from World Congress 2024

Beyond the Hype: Real-World AI Strategies Panel thumbnail

Beyond the Hype: Real-World AI Strategies Panel

Mike Butcher +3

Carl Lapierre - Exploring Advanced Patterns in Retrieval-Augmented Generation thumbnail

Carl Lapierre - Exploring Advanced Patterns in Retrieval-Augmented Generation

Carl Lapierre · Osedea

Coding an Immersive Copilot using Unity / .NET and Azure OpenAI! thumbnail

Coding an Immersive Copilot using Unity / .NET and Azure OpenAI!

Zaid Zaim · Neo4j

Building a diverse tech company: The power of Diversity, Equity, Inclusion, and Belonging thumbnail

Building a diverse tech company: The power of Diversity, Equity, Inclusion, and Belonging

Sue Quackenbush · Dynatrace

Livecoding with AI thumbnail

Livecoding with AI

Rainer Stropek · software architects

Dapr in Practice thumbnail

Dapr in Practice

marcklefter · AxonIQ

Upcoming sessions on this topic

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Your Server-Rendered App Doesn't Know Who It's Talking To

Anshul Bansal

OLX India

Principal Architect

When Caches Lie: Solving Transactional Integrity and Distributed Race Conditions in Spring Boot

Shuchita Prasad

JPMorgan

Senior Lead Engineer

Understanding React Performance Patterns Developers Often Get Wrong

Himanshu Srivastava

Best Buy India

Software Engineer

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

Vikram Vaswani

Consultant

The UI Engineering Playbook: Modern CSS, Design Systems, Motion & AI-Assisted Workflows

Wadad Parker

Ednius Inc.

SDE

Related videos

A Primer in Single Page Application Security (Angular, React, Vue.js) thumbnail

A Primer in Single Page Application Security (Angular, React, Vue.js)

Thomas Konrad

LIVE · Dec 2020

Securing Frontend Applications with Trusted Types thumbnail

Securing Frontend Applications with Trusted Types

Philippe De Ryck

LIVE · Feb 2022

101 Typical Security Pitfalls thumbnail

101 Typical Security Pitfalls

Alexander Pirker

World Congress · 2022

Security in modern Web Applications - OWASP to the rescue! thumbnail

Security in modern Web Applications - OWASP to the rescue!

Jakub Andrzejewski

World Congress · 2023

Dangerous Reactivity: Why AI Output Is the New XSS thumbnail

Dangerous Reactivity: Why AI Output Is the New XSS

Ramona Schwering · Auth0

World Congress Europe · 2026

WeAreDevelopers LIVE – Spicy Vanilla Web, CSS Magic & More thumbnail

Spicy Vanilla Web, CSS Magic & More

Chris Heilmann +2

LIVE · Nov 2025

Related articles

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

over 4 years ago

Walking Into The Era of Supply Chain Risks

DC

Daniel Cranney

Understanding and Mitigating Common Web Vulnerabilities

Vulnerabilities exist in many forms on the web, and attackers continue to find creative ways to exploit them. Technological advances like the proliferation of AI are of course exciting nd filled wi...

over 1 year ago

An image with neon lighting featuring a globe and a padlock

DC

Daniel Cranney

The Overflow: Security and Privacy

Every week we dig through hundreds of links from all over the web, and it’s often hard for developers keep up. So, we thought we’d put together some links we couldn’t fit in the Dev Digest in what ...

8 months ago

CH

Chris Heilmann

Dev Digest 138 - Are you secure about this?

Hello there! This is the 2nd "out of the can" edition of 3 as I am on vacation in Greece eating lovely things on the beach. So, fewer news, but lots of great resources. Many around the topic of sec...

about 2 years ago

Dev Digest 138 - Are you secure about this?

From learning to earning

Jobs that call for the skills explored in this talk.

about 2 months ago • Verified

Principal Cybersecurity Engineer

San Jose, United States

Expert $249k–348k Remote Cybersecurity

Product Security Incident Response Analyst

Expert $329k Remote Github Code Review Data Analysis

about 2 months ago • Verified

Senior Product Security Architect

Austin, United States

Expert Remote Agentic AI Security Architecture

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

Senior Software Engineer, Vulnerability Management

Expert $329k Remote Ruby Golang Docker

Senior Software Engineer, Angular (B2C Web Platform)

Barcelona, Spain

Remote Backend Caching Next.js