AppSec EU 2017 Boosting The Security Of Your Angular 2 Application by Philippe De Ryck
Channel: OWASP Foundation
Date: 2017-05-26

Angular is one of the most popular frameworks, and there is a lot  of information available on building applications, improving  performance, and various other topics. But do you know how to make your  Angular applications secure? What kind of security features does Angular  offer you, and which additional steps can you take to really boost the  security of your applications?

In this session,  you will learn how the paradigm shift from server-side to client-side  applications impacts security. We will discuss script-based threats  against Angular applications, and the concrete defenses Angular offers  to prevent or minimize these attacks. Additionally, we will dig into  various session management problems in combination with Angular. We  investigate topics such as Cross-Site Request Forgery (CSRF), cookie  flags, Authorization headers and JWT tokens.
After  attending this talk, you will have a good understanding of various  security threats against your Angular applications. In addition, you  will have concrete knowledge on how to use the latest security  technologies to effectively secure your Angular applications against  these threats.

-

Managed by the official OWASP Media Project https://www.owasp.org/index.php/OWASP_Media_Project