Writing Secure JavaScript Code - Avoiding Vulnerabilities and Attacks

Learn essential techniques for writing secure JavaScript code in this 32-minute conference talk from View Source 2017. Explore the strengths of JavaScript, understand common vulnerabilities, and dive into topics such as regular expressions, the event loop, and catastrophic backtracking. Discover how to prevent attacks through input manipulation, JSON handling, and type manipulation. Examine real-world examples, including the DustJS vulnerability, and gain practical insights on securing web applications. Conclude with key takeaways on library vulnerabilities, utilizing tools like Microsoft Sonar and Lighthouse, and the importance of regular upgrades for maintaining code security.