Getting Some Privacy on the Web Privacy feels hard — but it doesn’t need to be. If we move past a few confusing notions and the idea that we have to get everything perfectly right immediately, we can find ways to know what needs to be done and to get there step by step. Robin […]
Pay the Web Forward Trying to get paid on the Web today, as a creator, is broken and unfair. 70% of ad spend globally goes to only 2 platforms. Until recently, the Web couldn’t natively compete. A new W3C Standard proposal, Web Monetization, uses the Interledger Protocol to enable developers like you to make money […]
Auth on the web: better authentication New technology beyond is challenging the premise that we have to choose between more friction or more security for authenticating users. This talk will explore the benefits and drawbacks of frictionless authentication options beyond traditional one-time passcodes like biometrics, contextual data, or using devices as secure keys. Voice recognition […]
Set safer site defaults for today and tomorrow The web has a history of being an over-sharer. Original defaults tended to allowing everything—with restrictions needing to be explicitly added by the site. Newer APIs follow the principle of least privilege, so that’s better, but still have the challenge of maintaining backwards-compatibility leaves sites with a […]
Our free new online conference in January 2021 In 2020, we brought our long running, highly regarded, in-person conferences online, with an innovative format, and our own tailor-made platform. In 2021, we doubled down on online, creating 6, highly focussed, in-depth conferences for front end professionals. Now, we’re bringing the best of these 6 2021 […]
Continuous Security – Building Security into your Pipelines In the world of continuous delivery and cloud native, the boundaries between what is our application and what constitutes infrastructure is becoming increasingly blurred. Our workloads, the containers they ship in, and our platform configuration is now often developed and deployed by the same teams, and development […]
The State of XSS: Best practices for a secure web experience As the web continues to evolve, it’s become increasingly challenging for developers to build secure web experiences that users can trust. Cross-site scripting (XSS) attacks continue to exploit many trusted web applications today, resulting in malicious JavaScript being injected and executed within a user’s […]
Credentials management on the modern web With how reachable the web is, everyone is building apps that run on it to target its massive number of users. Many of these web apps require sign-ups or authentication of some form. At Safe learn how to build your web app around one of its core tenets – […]
Eliminating XSS by adopting Trusted Types Year after year, Cross-Site Scripting (XSS) continues to be the most expensive type of web vulnerability found in bug bounty programs. The most common variant of XSS occurs on the client side, when untrusted user input is passed to dangerous DOM APIs. Trusted Types is a novel web browser […]
Let’s talk about JWT JSON Web Tokens, or JWTs for short, are all over the web. They can be used to track bits of information about a user in a very compact way and can be used in APIs for authorization purposes. Join Jessica Temporal at Safe and learn what JWTs are, what problems it […]
A non trivial part of my working life involves scouring the web for great resources for our audience of frontend developers, designers, and other web and digital professionals. I use pinboard, an excellent bookmarking site, with browser extensions that make it very straightforward to add a site to my list of bookmarks, regardless of the […]
Deep dive into ARIA By now you probably know the first rule of ARIA: Don’t use ARIA, unless you really need to. Because sometimes, we do need to use ARIA. But when should we use ARIA? And how should we use it? These questions can leave us high and dry!
This session is more than a simple overview of what ARIA is. It’s an in-depth exploration of common ARIA roles, states, properties, and techniques that we can use to increase the accessibility of our web pages or applications. Don’t fret, we’re not going to dive head first into cold and murky water!
ARIA Spec for the Uninitiated Specs are usually not very fun, but I have learned that reading the ARIA specs is important to fully understand all the various options that are available. In this presentation, I will walk you through the ARIA spec and show you how to make the most out of it to create custom components with ARIA.
More to give than just the div: semantics and how to get them right Shared semantics is the web’s killer feature that allows developers create accessible experiences. In this talk, Hidde dives into the meaning of semantics (no pun intended), how it improves your site, specific gotchas and the future.
Accessibility has been a core focus of our conferences since the very beginning, with something like 20% of our very first conference way back in 2004 focussed specifically on the topic (sadly the site for that conference is lost to the sands of time). And all these years later in 2021 we’ve come somewhat full […]