AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
23min chapter
731: Client side security, XSS attacks & CSP with Stripe’s Alex Sexton
Syntax - Tasty Web Development Treats
Risks of Running Arbitrary Code on Websites
This chapter discusses the potential risks and vulnerabilities of running arbitrary code on websites, focusing on self-excess XSS attacks and the use of content security policy (CSP) to prevent JavaScript injection. The speakers highlight the benefits of using Sentry for handling CSP reports and the challenges in identifying hackers amidst violation reports.
00:00
Transcript
Episode notes
Get the Snipd
podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any
moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share
& Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode