Sesify - secure javascript browserify plugin

preview_player
Показать описание
Introduction to Sesify, a Browserify plugin for building secure javascript apps
Рекомендации по теме
Комментарии
Автор

Here's a bit more description to enable finding this video easier. Sesify examines the dependency graph of your javascript application, and then uses capability theory and static analysis to determine which modules have additional authority. This allows you to narrow the amount of code you need to audit to ensure your program is safe.
This is a wonderful tool, but more than that, this is a generally-useful technique for eliminating vulnerabilities that come from second or third-party packages, in any language. There is no need for such vulnerabilities to exist, although large installed bases, pervasive mutability (such as mutating sys.path or using custom loaders), and multiple-language libraries (especially when they are in languages resistant to efficient analysis, such as C++) make retrofitting this technology to existing packagers difficult. Let's hope we get there eventually, though!

capability-snob
Автор

I should have cranked font size for this video -- sorry!

aerinzero
join shbcf.ru