February 29 - March 2, 2012
Montreal, Canada
Is what you get what you expect to get?
Code injection into web apps is not a new phenomenon. It's been a constant on the web even longer than IE6. It's been around since the very first .cgi scripts were chmod +x'ed, resulting in a chroot 0wn3d.
Code injection is mainly brought about by web programmers not making sure that the input received from users is what was expected.
This talk, will concentrate mainly on XSS injection, but will also talk a little about SQLi and CSRF. We'll go over the kinds of programming mistakes that result in code injection, and how to change your mindset to prevent these issues.
Code injection is mainly brought about by web programmers not making sure that the input received from users is what was expected.
This talk, will concentrate mainly on XSS injection, but will also talk a little about SQLi and CSRF. We'll go over the kinds of programming mistakes that result in code injection, and how to change your mindset to prevent these issues.
Philip Tellis
SOASTA, Inc.
Philip Tellis is a geek who likes to make the computer do his work for him. As Chief Architect and Rum Distiller at SOASTA, he analyses the impact of various design decisions on web application performance, scalability and security. He is also the lead developer of "boomerang" -- a JavaScript based web performance measurement tool.
In his spare time, Philip enjoys cycling, reading, cooking and learning spoken languages.
Presented by
Sponsored by
Media
