CSS might not have been what brought me to the Web, but it’s very much what made me first deeply engage with the technology of the Web. Before its arrival I’d built quite a few web sites, and was teaching a course that involved building web sites at TAFE (post secondary education in Australia that’s […]
remember in-person events? World class speakers? the buzz of connecting with like-minded folks in our industry (and perhaps one too many amazing coffees?) Well, we do, and that’s why we are ridiculously excited to announce that Web Directions Summit will be returning for 2022, in Sydney December 1 and 2. And not only returning–we’ll be back be bigger and […]
Introduction to cryptography on the frontend Cryptography forms the backbone of how we securely use information online, but most developers don’t have more than a surface level understanding of cryptography. What’s more, cryptography is so easy to mess up – even the experts get it wrong! In this talk, attendees will learn about the basic […]
Hardened JavaScript Running other people’s code is dangerous and some people will even tell you that you shouldn’t do it. I’m here to tell you that actually, you can run other people’s code safely. The solution is hardened JavaScript. Kris Kowal Kris Kowal guided the CommonJS module system from design to adoption, most notably by […]
Getting Some Privacy on the Web Privacy feels hard — but it doesn’t need to be. If we move past a few confusing notions and the idea that we have to get everything perfectly right immediately, we can find ways to know what needs to be done and to get there step by step. Robin […]
Pay the Web Forward Trying to get paid on the Web today, as a creator, is broken and unfair. 70% of ad spend globally goes to only 2 platforms. Until recently, the Web couldn’t natively compete. A new W3C Standard proposal, Web Monetization, uses the Interledger Protocol to enable developers like you to make money […]
Auth on the web: better authentication New technology beyond is challenging the premise that we have to choose between more friction or more security for authenticating users. This talk will explore the benefits and drawbacks of frictionless authentication options beyond traditional one-time passcodes like biometrics, contextual data, or using devices as secure keys. Voice recognition […]
Set safer site defaults for today and tomorrow The web has a history of being an over-sharer. Original defaults tended to allowing everything—with restrictions needing to be explicitly added by the site. Newer APIs follow the principle of least privilege, so that’s better, but still have the challenge of maintaining backwards-compatibility leaves sites with a […]
Our free new online conference in January 2021 In 2020, we brought our long running, highly regarded, in-person conferences online, with an innovative format, and our own tailor-made platform. In 2021, we doubled down on online, creating 6, highly focussed, in-depth conferences for front end professionals. Now, we’re bringing the best of these 6 2021 […]
Continuous Security – Building Security into your Pipelines In the world of continuous delivery and cloud native, the boundaries between what is our application and what constitutes infrastructure is becoming increasingly blurred. Our workloads, the containers they ship in, and our platform configuration is now often developed and deployed by the same teams, and development […]
The State of XSS: Best practices for a secure web experience As the web continues to evolve, it’s become increasingly challenging for developers to build secure web experiences that users can trust. Cross-site scripting (XSS) attacks continue to exploit many trusted web applications today, resulting in malicious JavaScript being injected and executed within a user’s […]
Credentials management on the modern web With how reachable the web is, everyone is building apps that run on it to target its massive number of users. Many of these web apps require sign-ups or authentication of some form. At Safe learn how to build your web app around one of its core tenets – […]
Eliminating XSS by adopting Trusted Types Year after year, Cross-Site Scripting (XSS) continues to be the most expensive type of web vulnerability found in bug bounty programs. The most common variant of XSS occurs on the client side, when untrusted user input is passed to dangerous DOM APIs. Trusted Types is a novel web browser […]