When 3rd party JavaScript attacks (JS Party #336)

Aug 29, 2024

Simon Wijckmans from c/side, a web development and security expert, discusses critical vulnerabilities in third-party JavaScript. He details the recent Polyfill attack, emphasizing the risks of relying on external resources that can lead to malicious script injections. The conversation highlights strategies to enhance security, such as evaluating vendors and self-hosting scripts. Additionally, they address the challenges faced by developers in maintaining user trust while navigating privacy concerns related to third-party services.