WeAreDevelopers LIVE • Feb 24, 2022

Securing Frontend Applications with Trusted Types

Philippe De Ryck

Stop trusting static analysis to catch elusive DOM-based XSS. Move protection directly to the browser with Trusted Types to neutralize risky bypasses and unpatched third-party vulnerabilities forever.

Starting at 41:41 · Watch from the beginning

Securing Frontend Applications with Trusted Types thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

1:44 min

Enforcing safe HTML assignments using Trusted Types policies

martinakraus

martinakraus · World Congress 2024

2:20 min

Enforcing strict DOM APIs using trusted types

Thomas Konrad · LIVE

1:35 min

Enhancing core browser security with the native HTML Sanitizer API

Chris Heilmann

Chris Heilmann +2 · LIVE

3:37 min

Generating Trusted Types safely using the DOMPurify library

martinakraus

martinakraus · World Congress 2024

1:43 min

Stopping cross-site scripting attacks via secure HTML types

Michael Koppmann · LIVE

3:07 min

Implementing zero trust security practices in frontend applications

Jan Peer Stöcklmair

Jan Peer Stöcklmair · World Congress 2026 Europe

More from WeAreDevelopers LIVE

Humans in the Loop: Storytelling in Tech thumbnail

Humans in the Loop: Storytelling in Tech

Christian Heilmann +2

4 days ago

WeAreDevelopers LIVE: Your Brain Is Lying to You: Cognitive Biases in Development thumbnail

Your Brain Is Lying to You: Cognitive Biases in Development

Last week

Like Peas in a Pod - What Happens When People Clone Your App? thumbnail

Like Peas in a Pod - What Happens When People Clone Your App?

Ivan Kutskir +2

2 weeks ago

WeAreDevelopers LIVE - Read more, Prompt Less thumbnail

Read more, Prompt Less

Christian Heilmann +2

3 weeks ago

WeAreDevelopers LIVE - Tech Education in Two Languages thumbnail

Tech Education in Two Languages

Daniel Cranney +1

Oct 2026

WeAreDevelopers LIVE - Playing in Production thumbnail

Playing in Production

Andrew MacLean +2

Sep 2026

Upcoming sessions on this topic

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

Vikram Vaswani

Consultant

Your Server-Rendered App Doesn't Know Who It's Talking To

Anshul Bansal

OLX India

Principal Architect

Designing for Every Direction: Logical CSS for Global, Adaptive, and Effortlessly Reversible UIs

Vidhya Krishnamoorthy

Morgan Stanley

VP, Software Engineering Manager

The UI Engineering Playbook: Modern CSS, Design Systems, Motion & AI-Assisted Workflows

Wadad Parker

Ednius Inc.

SDE

Built-In AI in the Browser: Practical Capabilities for Modern Web Apps

Piyush Gupta

Expedia

Senior Engineering Manager

Related videos

Cross Site Scripting is yesterday's news, isn't it? thumbnail

Cross Site Scripting is yesterday's news, isn't it?

martinakraus · Kraus IT Consulting

World Congress · 2024

A Primer in Single Page Application Security (Angular, React, Vue.js) thumbnail

A Primer in Single Page Application Security (Angular, React, Vue.js)

Thomas Konrad

LIVE · Dec 2020

Friend or Foe? TypeScript Security Fallacies thumbnail

Friend or Foe? TypeScript Security Fallacies

Liran Tal · Snyk

World Congress · 2025

Security in modern Web Applications - OWASP to the rescue! thumbnail

Security in modern Web Applications - OWASP to the rescue!

Jakub Andrzejewski

World Congress · 2023

101 Typical Security Pitfalls thumbnail

101 Typical Security Pitfalls

Alexander Pirker

World Congress · 2022

Trust Issues: Because Zero-Trust Isn’t Optional Anymore thumbnail

Trust Issues: Because Zero-Trust Isn’t Optional Anymore

Jan Peer Stöcklmair · Sentry

World Congress Europe · 2026

Related articles

DC

Daniel Cranney

Understanding and Mitigating Common Web Vulnerabilities

Vulnerabilities exist in many forms on the web, and attackers continue to find creative ways to exploit them. Technological advances like the proliferation of AI are of course exciting nd filled wi...

over 1 year ago

An image with neon lighting featuring a globe and a padlock

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

over 4 years ago

Walking Into The Era of Supply Chain Risks

CH

Chris Heilmann

Dev Digest 138 - Are you secure about this?

Hello there! This is the 2nd "out of the can" edition of 3 as I am on vacation in Greece eating lovely things on the beach. So, fewer news, but lots of great resources. Many around the topic of sec...

about 2 years ago

Dev Digest 138 - Are you secure about this?

DC

Daniel Cranney

The Overflow: Security and Privacy

Every week we dig through hundreds of links from all over the web, and it’s often hard for developers keep up. So, we thought we’d put together some links we couldn’t fit in the Dev Digest in what ...

8 months ago

From learning to earning

Jobs that call for the skills explored in this talk.

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

Senior Web Software Architect, AI Experiences

TeamViewer Germany GmbH

Austin, TX, United States

Expert ReactJS TypeScript TeamViewer

Senior Software Engineer, Angular (B2C Web Platform)

Barcelona, Spain

Remote Backend Caching Next.js

about 2 months ago • Verified

Senior Product Security Architect

Austin, United States

Expert Remote Agentic AI Security Architecture

Staff Engineer - Web Platform

Expert Remote Next.js ReactJS Amazon S3

Senior Software Engineer, Identity Platform

San Francisco, CA, United States

Expert $329k Ruby OAuth Golang