Episode 73
073: Security in Elm
We discuss what makes Elm's security vulnerability surface area smaller, and what frontend security considerations are important in Elm apps.
January 2, 20231h 1m
Audio is streamed directly from the publisher (cdn.simplecast.com) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.
Show Notes
- Bobby Tables XKCD comic
- SQL injections
- DDoS attacks
- XSS (Cross-Site Scripting) attack prevention cheatsheet
- Jeroen's blog post Fixing vulnerabilities in Elm's virtual DOM
- HTTP cross origin cookie policy options
- Richard's Oslo Elm Day keynote where he discusses rolling your own tools for security reasons
lukewestby/elm-http-builder- Output Encoding article
- Elm's Virtual DOM implementation
- Feross' CS 253 Stanford Web Security course on YouTube
- Web Security course notes and slides
- Feross' blog post What's Really Going On Inside Your node_modules Folder?