filmov
tv
Same-origin policy: The core of web security @ OWASP Wellington
Показать описание
This session we've got Kirk Jackson from RedShield presenting, and he's going to introduce the same-origin policy that underpins browser security.
Abstract:
The "same-origin policy" is a loosely defined set of rules that has evolved over the years since javascript was first introduced in 1995.
In this talk, Kirk will explain how origins work in your web browser, and why they are the fundamental protection against attacks like cross-site request forgery.
Along the way we'll look at how you can leverage the same-origin policy to protect data on your site, and how you can bend it to your will to allow functionality to be hosted on multiple urls -- such as cross-origin resource sharing (CORS), PostMessage and JSONP.
Speaker Bio:
Kirk is an application security analyst and researcher at RedShield, where he protects vulnerable web apps for a living. Kirk organises the Wellington OWASP meetup, helps organise the OWASP NZ Day conference, and has presented at various conferences, meetups and code camps in New Zealand and overseas - usually on the topics of developer security and web security.
Live-stream:
This video will kick off at about 6pm on Monday 2 October and live-stream the session. After the session concludes you'll be able to watch at your leisure.
Abstract:
The "same-origin policy" is a loosely defined set of rules that has evolved over the years since javascript was first introduced in 1995.
In this talk, Kirk will explain how origins work in your web browser, and why they are the fundamental protection against attacks like cross-site request forgery.
Along the way we'll look at how you can leverage the same-origin policy to protect data on your site, and how you can bend it to your will to allow functionality to be hosted on multiple urls -- such as cross-origin resource sharing (CORS), PostMessage and JSONP.
Speaker Bio:
Kirk is an application security analyst and researcher at RedShield, where he protects vulnerable web apps for a living. Kirk organises the Wellington OWASP meetup, helps organise the OWASP NZ Day conference, and has presented at various conferences, meetups and code camps in New Zealand and overseas - usually on the topics of developer security and web security.
Live-stream:
This video will kick off at about 6pm on Monday 2 October and live-stream the session. After the session concludes you'll be able to watch at your leisure.
1:04:43
Same-origin policy: The core of web security @ OWASP Wellington
0:12:19
The Same Origin Policy - Hacker History
0:09:12
Same Origin Policy explained | what is Same Origin policy?
0:10:25
CSRF Introduction and what is the Same-Origin Policy? - web 0x04
0:08:14
Same Origin Policy & how it can be handled by Selenium WebDriver (Selenium Interview Question #1...
0:01:13
Same Origin Policy (SOP)
0:05:27
What is Same-Origin Policy?
0:03:59
Same-Origin Policy (SOP)
0:09:10
Same-origin policy | CORS | Web Security model 🌍
0:07:06
Lesson 19 Same origin policy
0:11:21
What is Same-Origin policy? How is it related to selenium? | Selenium Architecture
0:08:15
Что такое CORS и зачем он нужен? По простому
0:18:32
HTML5 Security Part 1/3 - Same Origin Policy Basics
0:06:06
Learn CORS In 6 Minutes
0:00:30
Same Origin Policy Protection (Video solution)
0:40:34
How Abusing Docker API Led to Remote Code Execution, Same Origin Bypass & more
0:03:34
WebApp Pentesting - 21 Same Origin Policy
0:07:43
Same-Origin Policy (SOP) Explained
0:12:35
CORS, Preflight Request, OPTIONS Method | Access Control Allow Origin Error Explained
0:03:37
What is the same-origin policy and how is it handled? | Pradeep Nailwal
0:44:30
Same Origin Method Execution (SOME) - Exploiting a Callback for Same Origin Policy Bypass
1:06:22
How did Selenium RC trick browsers to overcome Same origin policy?
0:23:51
Understanding the Same-Origin Policy and CORS - OWASP LATAM@Home 2021
2:02:54
Lecture 10: Same Origin Policy I
Комментарии