Wednesday
Room 3
11:40 - 12:40
(UTC+01)
Talk (60 min)
Your Website Is Running Code You’ve Never Seen
If your website includes third-party JavaScript, you are running code you probably haven’t reviewed, can’t inspect in production, and don’t control when it changes. That code runs with full access to the DOM, user data, authentication state, business logic, and more.
This session explores the risk of what that really means and what can go wrong. You can’t secure what you can’t see — but the browser can.
Scott Helme
Scott Helme is a security researcher, consultant and international speaker. He can often be found talking about web security and performance online and helping organisations better deploy both.
Founder of report-uri.com, a free CSP report collection service, and securityheaders.com, a free security analyser, Scott has a tendency to always be involved in building something new and exciting.