JS Realms, Security Blank Spot - Gal Weizman
Due to the rise of dependencies based development, the javascript ecosystem (and the browser javascript ecosystem in particular) is far more vulnerable to the rising major problem we know as “supply chain attacks”.
Therefore, many different supply chain security solutions were introduced to the industry as well, focusing on different ends of it, ranging from build time to runtime protection.
However, runtime browser based protections usually lack a major component in their solutions, one that mostly leaves such solutions completely vulnerable, almost as if they were never there.
Realms (aka iframes in the browser) is an ancient and legitimate concept that goes through a horrific spinoff in the context of bypassing browser based supply chain security attempts.
And the worst part is that carrying out attacks is so easy with realms, but defending realms is so complicated.
It's time to dive into the so important yet ignored layer in securing against unwanted code execution - it's time to talk about the javascript realms blank spot and its offensive/defensive security aspects.
Gal Weizman is a senior JS Security Engineer @ ConsenSys.
Watch video JS Realms, Security Blank Spot - Gal Weizman online without registration, duration hours minute second in high quality. This video was added by user Wix Engineering Tech Talks 09 March 2023, don't forget to share it with your friends and acquaintances, it has been viewed on our site 20 once and liked it people.