AppSec Israel 2018: Opening Keynote - The Last XSS Defense T... Sched.com Conference Mobile Apps AppSec Israel 2018 has ended Create Your Own Event Schedule Speakers Organizers Search Menu Schedule Speakers Organizers Search Share your event Share via or Copy link Copy ← Back to schedule Opening Keynote - The Last XSS Defense Talk Thursday September 6, 2018 10:00 - 10:40 IDT Bar-Shira Auditorium You're checked in! The Last XSS Defense Talk Why are we still talking about Cross Site Scripting in 2018? Because it's painfully difficult to defend against XSS even to this day. This talk is a fundamental update to the 2011 AppSec USA talk "The Past Present and Future of XSS Defense". We'll address new defensive strategies such as modern JavaScript framework defense in Angular, React and other frameworks. We'll also look at how CSP deployment has changed in the past 7 years illustrating the progressive use of content security which supports CSP v1, v2 and v3 concurrently. We will then look at advances in HTML sanitization on both the client and server and focus on sanitizers and defensive libraries that have stood the test of time in terms of maintenance and security. We'll also look at interesting design topics such as how HTML injection is still critical even in the face of rigorous XSS defense and how HTTPOnly cookies are largely ineffective. This talk should help developers and security professionals alike build a focused and modern strategy to defend against XSS in modern applications. Speakers Jim Manico Founder, Manicode Security Jim Manico is the founder of Manicode Security, a company dedicated to providing expert training in secure coding and security engineering to software developers. In addition to leading Manicode, Jim is actively involved in the tech-startup ecosystem as an investor and advisor. His... Read More → Thursday September 6, 2018 10:00 - 10:40 IDT Bar-Shira Auditorium Plenary Log in to save this to your schedule, view media, leave feedback and see who's attending! Tweet Share Get help with the event Contact event planner View support guides Find upcoming events Create an event you'd love to attend! Explore why organizers choose Sched • Success stories Event App • Event scheduling • Event registration • Event ticketing • Sched forms • Call for papers • Badges • Conferences © 2026. SCHED LLC - All rights reserved - Helping events since 2008 Conference Scheduling Software • Privacy • Terms Share Modal Share this link via Or copy link Copy