Content Security Policies: Let's Break Stuff • Matt Brunt • GOTO 2018

This presentation was recorded at GOTO Copenhagen 2018. #gotocon #gotocph http://gotocph.com Matt Brunt - Dungeon Master, Code Tinkerer & Cybersecurity Pro ABSTRACT Content Security Policies are another tool we should have in our security toolbelt to help protect users of our sites. In this session you'll learn what they are, why they're needed, how they work and the limitations on what they can & cannot do to protect users. You'll see a demo of attacks a CSP will block, you'll see a site broken by a CSP, show what the different CSP directives & options will do and be introduced to some of the tools available [...] Download slides and read the full abstract here: https://gotocph.com/2018/sessions/575 RECOMMENDED BOOKS Aaron Parecki • OAuth 2.0 Simplified • https://amzn.to/2A3IMOf Aaron Parecki • OAuth 2.0 Servers • https://amzn.to/3ecHEsz Aaron Parecki • The Little Book of OAuth 2.0 RFCs • https://amzn.to/3i7qnlC Erdal Ozkaya • Cybersecurity: The Beginner's Guide • https://amzn.to/2T6OIj3 Richer & Sanso • OAuth 2 in Action • https://amzn.to/3hXiAH6 Wilson & Hingnikar • Demystifying OAuth 2.0, OpenID Connect, and SAML 2.0 • https://amzn.to/2U8iLY2 https://twitter.com/gotocph https://www.facebook.com/GOTOConference https://www.linkedin.com/company/goto- http://gotocon.com #security #cybersecurity #ContentSecurityPolicies #CSP Looking for a unique learning experience? Attend the next GOTO Conference near you! Get your ticket at http://gotocon.com SUBSCRIBE TO OUR CHANNEL - new videos posted almost daily. https://www.youtube.com/user/GotoConferences/?sub_confirmation=1