World Congress 2025 • Aug 20, 2025 • Session details

Friend or Foe? TypeScript Security Fallacies

Are your TypeScript interfaces leaving your Node.js backend exposed? Discover how attackers bypass static compile-time checks and learn to implement strict runtime validation.

Starting at 2:19 · Watch from the beginning

Friend or Foe? TypeScript Security Fallacies thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

2:49 min

Introduction to the speakers and the TypeScript problem

Michael Hladky +1 · LIVE

2:00 min

The origins and early problems solved by TypeScript

Dani Coll

Dani Coll · World Congress 2026 Europe

2:28 min

Exploring the benefits of type safety and TypeScript migration

Chris Heilmann

Chris Heilmann +2 · LIVE

1:00 min

Misconceptions about TypeScript safety capabilities

Simone Sanfratello · JS Congress

4:58 min

Introduction to hidden problems in typical TypeScript code

Stefan Baumgartner · World Congress 2023

4:34 min

Discovering the hidden drawbacks of advanced type mitigations

Stefan Baumgartner · World Congress 2023

More from World Congress 2025

GenAI Security: Navigating the Unseen Iceberg thumbnail

GenAI Security: Navigating the Unseen Iceberg

Maish Saidel-Keesing · AWS

Behind the Code: How Women Are Powering the Future of AI thumbnail

Behind the Code: How Women Are Powering the Future of AI

Alexandra Wudel +2

The AI Hype Filter: What’s Real, What’s Investable, What’s Noise? thumbnail

The AI Hype Filter: What’s Real, What’s Investable, What’s Noise?

Justus Lumpe +3

AI in Leadership: How Technology is Reshaping Executive Roles thumbnail

AI in Leadership: How Technology is Reshaping Executive Roles

Bernd Datler +3

The AI-Ready Stack: Rethinking the Engineering Org of the Future thumbnail

The AI-Ready Stack: Rethinking the Engineering Org of the Future

Alex Laubscher +3

AI Sovereignty: What Does It Take? thumbnail

AI Sovereignty: What Does It Take?

Boris Hecker +3

Upcoming sessions on this topic

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

Vikram Vaswani

Consultant

The Death of Manual Memoization: High-Performance React 19 for the Scaling Startup

Vishnudhasan Govindarajan

CareStack

Product Engineer

From Profiler to Production: Measuring What Actually Matters in React & React Native

Andrei Tazetdinov

Dynatrace

React Native Developer

How Google built a Consistent, Global Authorization System with Zanzibar (and you can too!)

Sohan Maheshwar

AuthZed

Lead Developer Advocate

The Dream Team You Didn't Know You Had - Multi-Model, Multi-Agent, One Software Lifecycle

Aditya Dua

GitHub

Senior Manager, Field Services, SAARC

Related videos

Lies we Tell Ourselves As Developers thumbnail

Lies we Tell Ourselves As Developers

Stefan Baumgartner

World Congress · 2023

Don't compromise on speedy delivery nor type-safety by choosing TypeScript thumbnail

Don't compromise on speedy delivery nor type-safety by choosing TypeScript

Jens Claes

World Congress · 2023

End-to-End TypeScript: Completing the Modern Development Stack thumbnail

End-to-End TypeScript: Completing the Modern Development Stack

Marco Podien · Algorand Foundation

World Congress · 2025

Typed Security: Preventing Vulnerabilities By Design thumbnail

Typed Security: Preventing Vulnerabilities By Design

Michael Koppmann

LIVE · May 2024

Do TypeScript without TypeScript thumbnail

Do TypeScript without TypeScript

Simone Sanfratello

JS Congress · 2021

Where we're going we don't need JavaScript - Programming with Type Annotations thumbnail

Where we're going we don't need JavaScript - Programming with Type Annotations

Peter Kröner · Erklärbär Enterprises

World Congress · 2022

Related articles

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

over 4 years ago

Walking Into The Era of Supply Chain Risks

DC

Daniel Cranney

Exploring TypeScript: Benefits for Large-Scale JavaScript Projects

JavaScript is the backbone of web development, powering everything from small websites to large-scale enterprise applications. However, as projects grow in complexity, maintaining JavaScript code c...

over 1 year ago

CH

Chris Heilmann

Dev Digest 138 - Are you secure about this?

Hello there! This is the 2nd "out of the can" edition of 3 as I am on vacation in Greece eating lovely things on the beach. So, fewer news, but lots of great resources. Many around the topic of sec...

about 2 years ago

Dev Digest 138 - Are you secure about this?

CH

Chris Heilmann

Dev Digest 136 - No JS(on) of mine

News and ArticlesDouglas Crockford is our featured video, so let's talk about evolving JavaScript and all things JSON. Judicious JSON explains all the weird things in it, you can learn why it can b...

about 2 years ago

Dev Digest 136 - No JS(on) of mine

From learning to earning

Jobs that call for the skills explored in this talk.

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

Senior Software Engineer, Vulnerability Management

Expert $329k Remote Ruby Golang Docker

Senior Web Software Architect, AI Experiences

TeamViewer Germany GmbH

Austin, TX, United States

Expert ReactJS TypeScript TeamViewer

Senior Software Engineer (Backend/Full Stack)

Expert £45k–55k Stripe ReactJS Indexer

Staff Security Data Engineer

Experienced Remote Github Airflow Terraform

2 months ago • Verified

SoC Offensive Security Staff Engineer

Austin, United States

Experienced $198k–268k Remote Network Security