When 3rd party JavaScript attacks

JS Party: JavaScript, CSS, Web Development

Changelog Media에서 제공하는 콘텐츠입니다. 에피소드, 그래픽, 팟캐스트 설명을 포함한 모든 팟캐스트 콘텐츠는 Changelog Media 또는 해당 팟캐스트 플랫폼 파트너가 직접 업로드하고 제공합니다. 누군가가 귀하의 허락 없이 귀하의 저작물을 사용하고 있다고 생각되는 경우 여기에 설명된 절차를 따르실 수 있습니다 https://ko.player.fm/legal.

1+ y ago 53:15

MP3•에피소드 홈

저장한 시리즈 ("피드 비활성화" status)

When? This feed was archived on December 02, 2025 01:34 (12d ago). Last successful fetch was on March 07, 2025 14:01 (9M ago)

Why? 피드 비활성화 status. 잠시 서버에 문제가 발생해 팟캐스트를 불러오지 못합니다.

What now? You might be able to find a more up-to-date version using the search function. This series will no longer be checked for updates. If you believe this to be in error, please check if the publisher's feed link below is valid and contact support to request the feed be restored or if you have any other concerns about this.

Simon Wijckmans from c/side joins Jerod & Nick to discuss the Pollyfill attack in detail. What does it mean for web developers & client-side security going forward?

Join the discussion

Changelog++ members save 1 minute on this episode because they made the ads disappear. Join today!

Sponsors:

Wix – Wix Sudio is for devs who build websites, sell apps, go headless, or manage clients. Integrate, extend and write custom scripts in a VS code-based IDE. Leverage zero set up dev, test and production environments. Ship faster with an AI code assistant. And work with Wix headless API’s on any tech stack.

Featuring:

Simon Wijckmans – Website, GitHub, LinkedIn, X
Jerod Santo – GitHub, LinkedIn, Mastodon, X
Nick Nisi – Website, GitHub, Mastodon, X

Show Notes:

The Polyfill attack explained

Something missing or broken? PRs welcome!

챕터

1. It's party time, y'all (00:00:00)

2. Hello party people (00:00:56)

3. Welcoming Simon (00:01:23)

4. Hotlinking? Hotlinking! (00:01:47)

5. The Polyfill attack (00:02:56)

6. Nick gets called out (00:11:58)

7. Sponsor: Wix (00:14:52)

https://www.wix.com/studio

8. Reasonable risks (00:15:47)

9. Trust? But, verify (00:19:00)

10. How to verify (00:20:49)

11. Mitigation techniques (00:23:51)

12. Leading from the bottom (00:25:50)

13. Nick gets more secure (00:28:42)

14. What c/side offers (00:29:32)

15. Jerod avenges Nick (00:33:57)

16. Does c/side inject scripts? (00:38:22)

17. What the browsers could do (00:39:49)

18. Consider it cut (00:44:43)

19. Doing better server-side (00:45:31)

20. Ghoulish overkill (00:48:24)

21. Closing time (00:51:16)

22. Next up on the pod (00:51:49)

361 에피소드

#JavaScript #Prog Languages #Jsparty #Web #Programming #Frontend #Backend #Node #Changelog #Changelog Media #Tech #Animation #HTML #CSS #IoT #Robot

When 3rd party JavaScript attacks

JS Party: JavaScript, CSS, Web Development

883 subscribers

published 1+ y ago

MP3•에피소드 홈