Some of the very things that make JavaScript awesome can also make it exposed. This talk will go through some sample security flaws unique to JavaScript’s async nature and surrounding ecosystem. We’ll show live exploits to understand the issues and their impact, explain why they happen and – most importantly – how to avoid or fix them.
