{"id":1691,"date":"2014-10-07T17:05:16","date_gmt":"2014-10-07T16:05:16","guid":{"rendered":"https:\/\/yt.christiaan008.com\/?post_type=project&#038;p=1691"},"modified":"2015-06-08T09:35:18","modified_gmt":"2015-06-08T08:35:18","slug":"owasp-appsecusa-2011-ghosts-of-xss-past-present-and-future","status":"publish","type":"project","link":"https:\/\/yt.christiaan008.com\/?project=owasp-appsecusa-2011-ghosts-of-xss-past-present-and-future","title":{"rendered":"OWASP AppSecUSA 2011: Ghosts of XSS past, present and future"},"content":{"rendered":"<p>[et_pb_section fullwidth=&#8221;on&#8221; specialty=&#8221;off&#8221; transparent_background=&#8221;off&#8221; background_color=&#8221;#ffffff&#8221; inner_shadow=&#8221;off&#8221; parallax=&#8221;off&#8221; parallax_method=&#8221;off&#8221;][et_pb_fullwidth_slider admin_label=&#8221;Fullwidth Slider&#8221; show_arrows=&#8221;on&#8221; show_pagination=&#8221;on&#8221; auto=&#8221;off&#8221; parallax=&#8221;off&#8221; parallax_method=&#8221;on&#8221; module_id=&#8221;newtab&#8221;][et_pb_slide heading=&#8221;OWASP AppSecUSA 2011: Ghosts of XSS past, present and future&#8221; background_image=&#8221;https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2014\/10\/Coding5.jpeg&#8221; background_color=&#8221;#ffffff&#8221; alignment=&#8221;center&#8221; background_layout=&#8221;dark&#8221; video_url=&#8221;https:\/\/www.youtube.com\/watch?v=VWsXGlyBgTE&#8221; button_text=&#8221;Watch this video on YouTube&#8221; button_link=&#8221;https:\/\/www.youtube.com\/watch?v=VWsXGlyBgTE&#8221;]<\/p>\n<p>Speaker: Jim Manico<\/p>\n<p>This talk will discuss the past methods used for XSS defence that were only partially effective. Learning from these lessons, will also discuss present day defensive methodologies that are effective, but place an undue burden on the developer.<\/p>\n<p>We will then finish with a discussion of future XSS defense mythologies that shift the burden of XSS defense from the developer to various frameworks.<\/p>\n<p>These include auto-escaping template technologies, browser-based defenses such as Content Security Policy, and Javascript sandboxes such as the Google CAJA project and JSReg.<\/p>\n<p>[\/et_pb_slide][\/et_pb_fullwidth_slider][\/et_pb_section][et_pb_section][et_pb_row][et_pb_column type=&#8221;1_4&#8243;][et_pb_number_counter admin_label=&#8221;Number Counter&#8221; title=&#8221;Views&#8221; number=&#8221;443&#8243; percent_sign=&#8221;off&#8221; counter_color=&#8221;#2EA3F2&#8243; background_layout=&#8221;light&#8221; \/][\/et_pb_column][et_pb_column type=&#8221;1_4&#8243;][et_pb_number_counter admin_label=&#8221;Number Counter&#8221; title=&#8221;Likes&#8221; number=&#8221;4&#8243; percent_sign=&#8221;off&#8221; counter_color=&#8221;#2EA3F2&#8243; background_layout=&#8221;light&#8221; \/][\/et_pb_column][et_pb_column type=&#8221;1_4&#8243;][et_pb_blurb admin_label=&#8221;Blurb&#8221; title=&#8221;Source: OWASP&#8221; url=&#8221;https:\/\/www.youtube.com\/user\/OWASPGLOBAL&#8221; url_new_window=&#8221;on&#8221; use_icon=&#8221;off&#8221; icon_color=&#8221;#2EA3F2&#8243; use_circle=&#8221;off&#8221; circle_color=&#8221;#2EA3F2&#8243; use_circle_border=&#8221;off&#8221; circle_border_color=&#8221;#2EA3F2&#8243; image=&#8221;https:\/\/yt3.ggpht.com\/-DYIhxCnD52Q\/AAAAAAAAAAI\/AAAAAAAAAAA\/1oqAUTc5Jm8\/s100-c-k-no\/photo.jpg&#8221; alt=&#8221;OWASP&#8221; icon_placement=&#8221;top&#8221; animation=&#8221;left&#8221; background_layout=&#8221;light&#8221; text_orientation=&#8221;center&#8221; \/][\/et_pb_column][et_pb_column type=&#8221;1_4&#8243;][et_pb_blurb admin_label=&#8221;Blurb&#8221; title=&#8221;Source: Christiaan008&#8243; url=&#8221;https:\/\/www.youtube.com\/user\/ChRiStIaAn008&#8243; url_new_window=&#8221;on&#8221; use_icon=&#8221;off&#8221; icon_color=&#8221;#2EA3F2&#8243; use_circle=&#8221;off&#8221; circle_color=&#8221;#2EA3F2&#8243; use_circle_border=&#8221;off&#8221; circle_border_color=&#8221;#2EA3F2&#8243; image=&#8221;https:\/\/yt3.ggpht.com\/-p4i1EttlG4A\/AAAAAAAAAAI\/AAAAAAAAAAA\/LgFFtlbO4-Q\/s100-c-k-no\/photo.jpg&#8221; alt=&#8221;Christiaan008&#8243; icon_placement=&#8221;top&#8221; animation=&#8221;left&#8221; background_layout=&#8221;light&#8221; text_orientation=&#8221;center&#8221; \/][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fullwidth=&#8221;off&#8221; specialty=&#8221;off&#8221; transparent_background=&#8221;off&#8221; background_color=&#8221;#f2f2f2&#8243; inner_shadow=&#8221;off&#8221; parallax=&#8221;off&#8221; parallax_method=&#8221;off&#8221;][et_pb_row][et_pb_column type=&#8221;1_4&#8243;][et_pb_blurb admin_label=&#8221;Main category &#8211; Disclosure &amp; vulnerability&#8221; title=&#8221;Main category&#8221; url_new_window=&#8221;off&#8221; use_icon=&#8221;off&#8221; icon_color=&#8221;#2EA3F2&#8243; use_circle=&#8221;off&#8221; circle_color=&#8221;#2EA3F2&#8243; use_circle_border=&#8221;off&#8221; circle_border_color=&#8221;#2EA3F2&#8243; image=&#8221;https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2014\/10\/main_disclosure_96_96_black.svg&#8221; icon_placement=&#8221;top&#8221; animation=&#8221;top&#8221; background_layout=&#8221;light&#8221; text_orientation=&#8221;center&#8221; url=&#8221;https:\/\/yt.christiaan008.com\/technical-videos-by-category\/#Disclosure&#8221;]<\/p>\n<p>Disclosure &amp; vulnerability<\/p>\n<p>[\/et_pb_blurb][\/et_pb_column][et_pb_column type=&#8221;1_4&#8243;][et_pb_blurb admin_label=&#8221;Subcategory &#8211; Vulnerability&#8221; title=&#8221;Subcategory&#8221; url_new_window=&#8221;off&#8221; use_icon=&#8221;off&#8221; icon_color=&#8221;#2EA3F2&#8243; use_circle=&#8221;off&#8221; circle_color=&#8221;#2EA3F2&#8243; use_circle_border=&#8221;off&#8221; circle_border_color=&#8221;#2EA3F2&#8243; image=&#8221;https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2014\/10\/sub_vulnerability_96_96_black.svg&#8221; icon_placement=&#8221;top&#8221; animation=&#8221;top&#8221; background_layout=&#8221;light&#8221; text_orientation=&#8221;center&#8221; url=&#8221;https:\/\/yt.christiaan008.com\/technical-videos-by-category\/#Disclosure&#8221;]<\/p>\n<p>Vulnerability<\/p>\n<p>[\/et_pb_blurb][\/et_pb_column][et_pb_column type=&#8221;1_4&#8243;][et_pb_blurb admin_label=&#8221;Main category &#8211; Information security &amp; security management&#8221; title=&#8221;Main category&#8221; url_new_window=&#8221;off&#8221; use_icon=&#8221;off&#8221; icon_color=&#8221;#2EA3F2&#8243; use_circle=&#8221;off&#8221; circle_color=&#8221;#2EA3F2&#8243; use_circle_border=&#8221;off&#8221; circle_border_color=&#8221;#2EA3F2&#8243; image=&#8221;https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2014\/10\/main_information_security_96_96_black.svg&#8221; icon_placement=&#8221;top&#8221; animation=&#8221;top&#8221; background_layout=&#8221;light&#8221; text_orientation=&#8221;center&#8221; url=&#8221;https:\/\/yt.christiaan008.com\/technical-videos-by-category\/#Informationsecurity&#8221;]<\/p>\n<p>Information security &amp; security management<\/p>\n<p>[\/et_pb_blurb][\/et_pb_column][et_pb_column type=&#8221;1_4&#8243;][et_pb_blurb admin_label=&#8221;Subcategory &#8211; Information security&#8221; title=&#8221;Subcategory&#8221; url_new_window=&#8221;off&#8221; use_icon=&#8221;off&#8221; icon_color=&#8221;#2EA3F2&#8243; use_circle=&#8221;off&#8221; circle_color=&#8221;#2EA3F2&#8243; use_circle_border=&#8221;off&#8221; circle_border_color=&#8221;#2EA3F2&#8243; image=&#8221;https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2014\/10\/sub_information_security_96_96_black.svg&#8221; icon_placement=&#8221;top&#8221; animation=&#8221;top&#8221; background_layout=&#8221;light&#8221; text_orientation=&#8221;center&#8221; url=&#8221;https:\/\/yt.christiaan008.com\/technical-videos-by-category\/#Informationsecurity&#8221;]<\/p>\n<p>Information security<\/p>\n<p>[\/et_pb_blurb][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fullwidth=&#8221;off&#8221; specialty=&#8221;off&#8221; transparent_background=&#8221;on&#8221; background_color=&#8221;#2ea3f2&#8243; inner_shadow=&#8221;on&#8221; parallax=&#8221;off&#8221; parallax_method=&#8221;off&#8221;][et_pb_row][et_pb_column type=&#8221;1_2&#8243;][et_pb_blurb admin_label=&#8221;Blurb&#8221; url_new_window=&#8221;off&#8221; use_icon=&#8221;off&#8221; icon_color=&#8221;#2EA3F2&#8243; use_circle=&#8221;off&#8221; circle_color=&#8221;#2EA3F2&#8243; use_circle_border=&#8221;off&#8221; circle_border_color=&#8221;#2EA3F2&#8243; image=&#8221;https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/01\/video_wall_96_96_black.svg&#8221; icon_placement=&#8221;top&#8221; animation=&#8221;left&#8221; background_layout=&#8221;light&#8221; text_orientation=&#8221;center&#8221; \/][et_pb_cta admin_label=&#8221;Call To Action&#8221; button_url=&#8221;https:\/\/yt.christiaan008.com\/technical-videos\/&#8221; button_text=&#8221;Video wall&#8221; use_background_color=&#8221;off&#8221; background_color=&#8221;#f2f2f2&#8243; background_layout=&#8221;light&#8221; text_orientation=&#8221;center&#8221; title=&#8221;Be surprised&#8221; \/][\/et_pb_column][et_pb_column type=&#8221;1_2&#8243;][et_pb_blurb admin_label=&#8221;Blurb&#8221; url_new_window=&#8221;off&#8221; use_icon=&#8221;off&#8221; icon_color=&#8221;#2EA3F2&#8243; use_circle=&#8221;off&#8221; circle_color=&#8221;#2EA3F2&#8243; use_circle_border=&#8221;off&#8221; circle_border_color=&#8221;#2EA3F2&#8243; image=&#8221;https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/01\/videos_by_category_96_96_black.svg&#8221; icon_placement=&#8221;top&#8221; animation=&#8221;left&#8221; background_layout=&#8221;light&#8221; text_orientation=&#8221;center&#8221; \/][et_pb_cta admin_label=&#8221;Call To Action&#8221; button_url=&#8221;https:\/\/yt.christiaan008.com\/technical-videos-by-category\/&#8221; button_text=&#8221;Videos by category&#8221; use_background_color=&#8221;off&#8221; background_color=&#8221;#2EA3F2&#8243; background_layout=&#8221;light&#8221; text_orientation=&#8221;center&#8221; title=&#8221;I know what I&#8217;m looking for&#8221; \/][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fullwidth=&#8221;on&#8221; specialty=&#8221;off&#8221; transparent_background=&#8221;off&#8221; background_color=&#8221;#f2f2f2&#8243; inner_shadow=&#8221;off&#8221; parallax=&#8221;off&#8221; parallax_method=&#8221;off&#8221;][et_pb_fullwidth_header admin_label=&#8221;Fullwidth Header&#8221; title=&#8221;Related videos&#8221; background_layout=&#8221;light&#8221; text_orientation=&#8221;center&#8221; \/][\/et_pb_section][et_pb_section fullwidth=&#8221;off&#8221; specialty=&#8221;off&#8221; transparent_background=&#8221;on&#8221; background_color=&#8221;#f2f2f2&#8243; inner_shadow=&#8221;off&#8221; parallax=&#8221;off&#8221; parallax_method=&#8221;off&#8221;][et_pb_row][et_pb_column type=&#8221;4_4&#8243;][et_pb_filterable_portfolio admin_label=&#8221;Filterable Portfolio&#8221; fullwidth=&#8221;off&#8221; posts_number=&#8221;4&#8243; include_categories=&#8221;104,86,99&#8243; show_title=&#8221;on&#8221; show_categories=&#8221;off&#8221; show_pagination=&#8221;on&#8221; background_layout=&#8221;light&#8221; \/][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This talk will discuss the past methods used for XSS defence that were only partially effective. Learning from these lessons, will also discuss present day defensive methodologies that are effective, but place an undue burden on the developer.<\/p>\n","protected":false},"author":2,"featured_media":1699,"comment_status":"open","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","inline_featured_image":false,"footnotes":""},"project_category":[105,151,104,155,85,189,191,198,99],"project_tag":[],"class_list":["post-1691","project","type-project","status-publish","has-post-thumbnail","hentry","project_category-browser","project_category-disclosure-vulnerability","project_category-information-security-2","project_category-information-security-security-management-main","project_category-technical_grid_slider1","project_category-owasp","project_category-owasp-appsecusa-2011","project_category-rss-all","project_category-vulnerability-2"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>OWASP AppSecUSA 2011: Ghosts of XSS past, present and future | Christiaan&#039;s collection<\/title>\n<meta name=\"description\" content=\"This talk will discuss the past methods used for XSS defence that were only partially effective. Learning from these lessons, will also discuss present day defensive methodologies that are effective, but place an undue burden on the developer.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/yt.christiaan008.com\/?project=owasp-appsecusa-2011-ghosts-of-xss-past-present-and-future\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"OWASP AppSecUSA 2011: Ghosts of XSS past, present and future | Christiaan&#039;s collection\" \/>\n<meta property=\"og:description\" content=\"This talk will discuss the past methods used for XSS defence that were only partially effective. Learning from these lessons, will also discuss present day defensive methodologies that are effective, but place an undue burden on the developer.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/yt.christiaan008.com\/?project=owasp-appsecusa-2011-ghosts-of-xss-past-present-and-future\" \/>\n<meta property=\"og:site_name\" content=\"Christiaan&#039;s collection\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/christiaan008\" \/>\n<meta property=\"article:modified_time\" content=\"2015-06-08T08:35:18+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2014\/10\/owasp-appsecusa-2011-ghosts-of-x.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"480\" \/>\n\t<meta property=\"og:image:height\" content=\"360\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@christiaan008\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/yt.christiaan008.com\\\/?project=owasp-appsecusa-2011-ghosts-of-xss-past-present-and-future\",\"url\":\"https:\\\/\\\/yt.christiaan008.com\\\/?project=owasp-appsecusa-2011-ghosts-of-xss-past-present-and-future\",\"name\":\"OWASP AppSecUSA 2011: Ghosts of XSS past, present and future | Christiaan&#039;s collection\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/yt.christiaan008.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/yt.christiaan008.com\\\/?project=owasp-appsecusa-2011-ghosts-of-xss-past-present-and-future#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/yt.christiaan008.com\\\/?project=owasp-appsecusa-2011-ghosts-of-xss-past-present-and-future#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/yt.christiaan008.com\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2014\\\/10\\\/owasp-appsecusa-2011-ghosts-of-x.jpg\",\"datePublished\":\"2014-10-07T16:05:16+00:00\",\"dateModified\":\"2015-06-08T08:35:18+00:00\",\"description\":\"This talk will discuss the past methods used for XSS defence that were only partially effective. Learning from these lessons, will also discuss present day defensive methodologies that are effective, but place an undue burden on the developer.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/yt.christiaan008.com\\\/?project=owasp-appsecusa-2011-ghosts-of-xss-past-present-and-future#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/yt.christiaan008.com\\\/?project=owasp-appsecusa-2011-ghosts-of-xss-past-present-and-future\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/yt.christiaan008.com\\\/?project=owasp-appsecusa-2011-ghosts-of-xss-past-present-and-future#primaryimage\",\"url\":\"https:\\\/\\\/yt.christiaan008.com\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2014\\\/10\\\/owasp-appsecusa-2011-ghosts-of-x.jpg\",\"contentUrl\":\"https:\\\/\\\/yt.christiaan008.com\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2014\\\/10\\\/owasp-appsecusa-2011-ghosts-of-x.jpg\",\"width\":480,\"height\":360},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/yt.christiaan008.com\\\/?project=owasp-appsecusa-2011-ghosts-of-xss-past-present-and-future#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/yt.christiaan008.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Projects\",\"item\":\"https:\\\/\\\/yt.christiaan008.com\\\/?post_type=project\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"OWASP AppSecUSA 2011: Ghosts of XSS past, present and future\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/yt.christiaan008.com\\\/#website\",\"url\":\"https:\\\/\\\/yt.christiaan008.com\\\/\",\"name\":\"Christiaan&#039;s collection\",\"description\":\"A great collection of security related videos!\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/yt.christiaan008.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"OWASP AppSecUSA 2011: Ghosts of XSS past, present and future | Christiaan&#039;s collection","description":"This talk will discuss the past methods used for XSS defence that were only partially effective. Learning from these lessons, will also discuss present day defensive methodologies that are effective, but place an undue burden on the developer.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/yt.christiaan008.com\/?project=owasp-appsecusa-2011-ghosts-of-xss-past-present-and-future","og_locale":"en_US","og_type":"article","og_title":"OWASP AppSecUSA 2011: Ghosts of XSS past, present and future | Christiaan&#039;s collection","og_description":"This talk will discuss the past methods used for XSS defence that were only partially effective. Learning from these lessons, will also discuss present day defensive methodologies that are effective, but place an undue burden on the developer.","og_url":"https:\/\/yt.christiaan008.com\/?project=owasp-appsecusa-2011-ghosts-of-xss-past-present-and-future","og_site_name":"Christiaan&#039;s collection","article_publisher":"https:\/\/www.facebook.com\/christiaan008","article_modified_time":"2015-06-08T08:35:18+00:00","og_image":[{"width":480,"height":360,"url":"https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2014\/10\/owasp-appsecusa-2011-ghosts-of-x.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_site":"@christiaan008","twitter_misc":{"Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/yt.christiaan008.com\/?project=owasp-appsecusa-2011-ghosts-of-xss-past-present-and-future","url":"https:\/\/yt.christiaan008.com\/?project=owasp-appsecusa-2011-ghosts-of-xss-past-present-and-future","name":"OWASP AppSecUSA 2011: Ghosts of XSS past, present and future | Christiaan&#039;s collection","isPartOf":{"@id":"https:\/\/yt.christiaan008.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/yt.christiaan008.com\/?project=owasp-appsecusa-2011-ghosts-of-xss-past-present-and-future#primaryimage"},"image":{"@id":"https:\/\/yt.christiaan008.com\/?project=owasp-appsecusa-2011-ghosts-of-xss-past-present-and-future#primaryimage"},"thumbnailUrl":"https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2014\/10\/owasp-appsecusa-2011-ghosts-of-x.jpg","datePublished":"2014-10-07T16:05:16+00:00","dateModified":"2015-06-08T08:35:18+00:00","description":"This talk will discuss the past methods used for XSS defence that were only partially effective. Learning from these lessons, will also discuss present day defensive methodologies that are effective, but place an undue burden on the developer.","breadcrumb":{"@id":"https:\/\/yt.christiaan008.com\/?project=owasp-appsecusa-2011-ghosts-of-xss-past-present-and-future#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/yt.christiaan008.com\/?project=owasp-appsecusa-2011-ghosts-of-xss-past-present-and-future"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/yt.christiaan008.com\/?project=owasp-appsecusa-2011-ghosts-of-xss-past-present-and-future#primaryimage","url":"https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2014\/10\/owasp-appsecusa-2011-ghosts-of-x.jpg","contentUrl":"https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2014\/10\/owasp-appsecusa-2011-ghosts-of-x.jpg","width":480,"height":360},{"@type":"BreadcrumbList","@id":"https:\/\/yt.christiaan008.com\/?project=owasp-appsecusa-2011-ghosts-of-xss-past-present-and-future#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/yt.christiaan008.com\/"},{"@type":"ListItem","position":2,"name":"Projects","item":"https:\/\/yt.christiaan008.com\/?post_type=project"},{"@type":"ListItem","position":3,"name":"OWASP AppSecUSA 2011: Ghosts of XSS past, present and future"}]},{"@type":"WebSite","@id":"https:\/\/yt.christiaan008.com\/#website","url":"https:\/\/yt.christiaan008.com\/","name":"Christiaan&#039;s collection","description":"A great collection of security related videos!","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/yt.christiaan008.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/yt.christiaan008.com\/index.php?rest_route=\/wp\/v2\/project\/1691","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/yt.christiaan008.com\/index.php?rest_route=\/wp\/v2\/project"}],"about":[{"href":"https:\/\/yt.christiaan008.com\/index.php?rest_route=\/wp\/v2\/types\/project"}],"author":[{"embeddable":true,"href":"https:\/\/yt.christiaan008.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/yt.christiaan008.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1691"}],"version-history":[{"count":16,"href":"https:\/\/yt.christiaan008.com\/index.php?rest_route=\/wp\/v2\/project\/1691\/revisions"}],"predecessor-version":[{"id":7092,"href":"https:\/\/yt.christiaan008.com\/index.php?rest_route=\/wp\/v2\/project\/1691\/revisions\/7092"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/yt.christiaan008.com\/index.php?rest_route=\/wp\/v2\/media\/1699"}],"wp:attachment":[{"href":"https:\/\/yt.christiaan008.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1691"}],"wp:term":[{"taxonomy":"project_category","embeddable":true,"href":"https:\/\/yt.christiaan008.com\/index.php?rest_route=%2Fwp%2Fv2%2Fproject_category&post=1691"},{"taxonomy":"project_tag","embeddable":true,"href":"https:\/\/yt.christiaan008.com\/index.php?rest_route=%2Fwp%2Fv2%2Fproject_tag&post=1691"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}