Angular is one of the most popular frameworks, and there is a lot of information available on building applications, improving performance, and various other topics. But do you know how to make your Angular applications secure? What kind of security features does Angular offer you, and which additional steps can you take to really boost the security of your applications?
In this session, you will learn how the paradigm shift from server-side to client-side applications impacts security. We will discuss script-based threats against Angular applications, and the concrete defenses Angular offers to prevent or minimize these attacks. Additionally, we will dig into various session management problems in combination with Angular. We investigate topics such as Cross-Site Request Forgery (CSRF), cookie flags, Authorization headers and JWT tokens.
After attending this talk, you will have a good understanding of various security threats against your Angular applications. In addition, you will have concrete knowledge on how to use the latest security technologies to effectively secure your Angular applications against these threats.
-
Managed by the official OWASP Media Project https://www.owasp.org/index.php/OWASP_Media_Project