Content Security Policy (CSP) Courses and Certifications

OWASP Foundation

Making CSP Great Again - Enhancing Content Security Policy

Explore advanced Content Security Policy techniques to enhance web application security and mitigate XSS vulnerabilities effectively.

• YouTube
• 44 minutes
• On-Demand
• Free Video

LASCON

Mind the CSP Gap: Challenges Developing a Meaningful Content-Security-Policy

Strategies for implementing Content Security Policy (CSP) effectively, addressing challenges and phasing in a meaningful policy without disrupting engineering teams.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Association for Computing Machinery (ACM)

CSP is Dead, Long Live CSP! - On the Insecurity of Whitelists and the Future of the Content Security Policy

Explore the evolution and challenges of Content Security Policy, analyzing its effectiveness, vulnerabilities, and future directions in web security.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Roadblocks for Content Security Policy (CSP) Implementation - Developer Challenges and Solutions

Explore challenges in implementing Content Security Policy (CSP) for web security, including complexity, legacy code, and browser support. Learn strategies to overcome obstacles and enhance CSP deployment.

• YouTube
• 39 minutes
• On-Demand
• Free Video

OWASP Foundation

Content Security Policy (CSP) - Understanding and Implementing Web Protection

Learn about Content Security Policy (CSP), a powerful browser security feature that mitigates cross-site scripting attacks. Discover its benefits, implementation strategies, and future impact on web security.

• YouTube
• 32 minutes
• On-Demand
• Free Video

JSConf

HTTP Headers for the Responsible Developer

Explore HTTP headers' impact on user experience, accessibility, and performance for building inclusive websites. Learn to enhance UIs beyond code.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

Devoxx

Getting Single Page Application Security Right

Explore SPA security challenges and solutions, covering XSS, CSP, session management, and CSRF in RESTful APIs. Learn practical strategies for building secure web applications using modern frameworks.

• YouTube
• 2 hours 11 minutes
• On-Demand
• Conference Talk

media.ccc.de

Breaking Microsoft Edge Extensions Security Policies

Uncover vulnerabilities in Microsoft Edge extensions, exploring permission bypasses, data theft, and security policy breaches. Learn about browser extension security and its impact on user privacy.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

LASCON

Fixing XSS with Content Security Policy

Explore Content Security Policy (CSP) as a defense against XSS attacks, comparing CSP 1.0 and 2.0, and learn implementation strategies for enhanced web application security.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

OWASP Foundation

OWASP Top 10 for JavaScript Developers

Explore JavaScript vulnerabilities in OWASP Top 10, covering client and server-side issues with focus on modern frameworks and NodeJS. Learn prevention techniques for secure web development.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Don't Trust the DOM - Bypassing XSS Mitigations via Script Gadgets

Explores novel XSS attack technique using script gadgets to bypass mitigations, demonstrating vulnerabilities in modern JavaScript libraries and advocating for preventive security measures.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

NDC Conferences

The Last XSS Defense Talk

Comprehensive exploration of modern XSS defense strategies, covering JavaScript frameworks, CSP deployment, HTML sanitization, and design considerations for building secure web applications.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Devoxx

Are You Botching the Security of Your AngularJS Application

Discover AngularJS's built-in security features and learn how to leverage them effectively. Explore protection against XSS, CSP implementation, and CSRF prevention for safer web applications.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

Devoxx

Browser Security and HTTP Headers - Attacks and Protections in Action

Explore browser vulnerabilities and learn to mitigate attacks using HTTP security headers like CSP, HSTS, and CORS through live demonstrations and practical examples.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

NDC Conferences

Modern Security Standards

Explore modern web security standards, cutting through acronyms to understand powerful features that enhance protection and simplify implementation for developers.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk