SecAppDev 2025 workshop details
Hands-on deep-dive into frontend security
Learning goal: Understand and apply state-of-the-art security mechanisms to protect modern frontends from real-world threats.
Schedule TBD
Abstract
Modern web applications rely heavily on frontend code, making browser security mechanisms crucial for protecting users and data. This hands-on workshop takes a deep dive into advanced frontend security for Angular / React / Vue applications.
Participants will explore real-world attack scenarios and implement defenses through guided exercises. Designed for developers and security professionals, this workshop blends academic depth with practical application, equipping attendees with the skills to secure modern frontends effectively.
Content overview
- The security model of frontend web applications
- Defending against UI redressing attacks
- Using Subresource Integrity for JavaScript security
- Isolating untrusted content with HTML5 sandboxing
- Understanding the threat behind XSS
- Preventing XSS in Angular / React / Vue
- XSS pitfalls in Angular / React / Vue
- Using Trusted Types as an XSS defense
- Introduction to Content Security Policy (CSP)
- Deploying CSP for Single Page Applications
- Practicalities about CSP
- Hands-on labs throughout the day
Content level
Deep-dive
Target audience
Developers, architects, and security professionals working with frontends
Prerequisites
Understanding JavaScript and frontend applications. Labs do not require prerequisite security knowledge or proficient developer skills.
Technical requirements
A laptop with a modern browser
Join us for SecAppDev. You will not regret it!
Grab your seat now
Philippe De Ryck
Security Expert, Pragmatic Web Security
Expertise: Web security, API security, OAuth 2.0, OpenID Connect
Join us for SecAppDev. You will not regret it!
Grab your seat nowOther workshops
Secure Coding Workshop
One-day workshop by Jim Manico
This hands-on workshop teaches developers the principles of secure coding, focusing on real-world attack scenarios and defense strategies. Participants will learn to identify and mitigate vulnerabilities such as injection flaws, XSS, authentication weaknesses, and insecure dependencies. Using AI code generators and security tools, attendees will strengthen their ability to write robust, secure applications.
Ideal for developers looking to enhance their security mindset and build software that withstands modern threats.
Learning goal: Attendees will learn to build secure APIs by preventing injection attacks, managing third-party risks, OAuth2 basics, securing React integrations, and handling file uploads safely. They will also explore AI-assisted code generation.