mario-heiderich documents

JSMVCOMFG - To sternly look at JavaScript MVC and Templating Frameworks
Technology JSMVCOMFG - To sternly look at JavaScript MVC and Templating Frameworks
In the DOM, no one will hear you scream
Internet In the DOM, no one will hear you scream
Scriptless Attacks - Stealing the Pie without touching the Sill
Technology Scriptless Attacks - Stealing the Pie without touching the Sill
The innerHTML Apocalypse
Education The innerHTML Apocalypse
Locking the Throne Room - How ES5+ might change views on XSS and Client Side Security
Technology Locking the Throne Room - How ES5+ might change views on XSS and Client Side Security
Locking the Throneroom 2.0
Technology Locking the Throneroom 2.0
Dev and Blind - Attacking the weakest Link in IT Security
Technology Dev and Blind - Attacking the weakest Link in IT Security
HTML5 - The Good, the Bad, the Ugly
Technology HTML5 - The Good, the Bad, the Ugly
Web Wuermer
Technology Web Wuermer
The Future of Web Attacks - CONFidence 2010
Technology The Future of Web Attacks - CONFidence 2010
I thought you were my friend!
Technology I thought you were my friend!
Generic Attack Detection - ph-Neutral 0x7d8
Business Generic Attack Detection - ph-Neutral 0x7d8
The Ultimate IDS Smackdown
Technology The Ultimate IDS Smackdown
JavaScript From Hell - CONFidence 2.0 2009
Technology JavaScript From Hell - CONFidence 2.0 2009
The Image that called me - Active Content Injection with SVG Files
Technology The Image that called me - Active Content Injection with SVG Files
ECMAScript 6 from an Attacker's Perspective - Breaking Frameworks, Sandboxes, and everything else
Internet ECMAScript 6 from an Attacker's Perspective - Breaking Frameworks, Sandboxes, and everything else
Copy & Pest - A case-study on the clipboard, blind trust and invisible cross-application XSS
Internet Copy & Pest - A case-study on the clipboard, blind trust and invisible cross-application XSS
An Abusive Relationship with AngularJS
Internet An Abusive Relationship with AngularJS
Copy & Pest - A case-study on the clipboard, blind trust and invisible cross-application XSS
Internet Copy & Pest - A case-study on the clipboard, blind trust and invisible cross-application XSS
An Abusive Relationship with AngularJS
Internet An Abusive Relationship with AngularJS
ECMAScript 6 from an Attacker's Perspective - Breaking Frameworks, Sandboxes, and everything else
Internet ECMAScript 6 from an Attacker's Perspective - Breaking Frameworks, Sandboxes, and everything else