{"guid":"f5faa8fc-8506-46c9-bce0-51bbd85a0898","title":"Modern solutions against Cross-Site Attacks","subtitle":null,"slug":"god2024-56286-modern-solutions-against-c","link":"https://c3voc.de","description":"Web security is increasingly an opt-in approach, leaving developers with both the opportunity and the responsibility to protect their applications. This talk will explore why and how developers can secure their sites against evolving threats.\n\nWe'll delve into the nuances of cross-site leaks (xs-leaks) and discuss the Cross-Origin Resource Policy (CORP) as well as the abstractions provided by. Learn how these tools can empower you to build custom defenses and proactively safeguard your web applications.\n\nLicensed to the public under https://creativecommons.org/licenses/by-sa/4.0/","original_language":"eng","persons":["Frederik Braun"],"view_count":732,"promoted":false,"date":"2024-11-13T17:00:00.000+01:00","release_date":"2024-11-13T00:00:00.000+01:00","updated_at":"2026-04-15T14:45:06.757+02:00","tags":["56286","god2024","god2024","OWASP","Saal 1","2024","Day 1"],"length":1631,"duration":1631,"thumb_url":"https://static.media.ccc.de/media/events/god/2024/56286-f5faa8fc-8506-46c9-bce0-51bbd85a0898.jpg","poster_url":"https://static.media.ccc.de/media/events/god/2024/56286-f5faa8fc-8506-46c9-bce0-51bbd85a0898_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/god/2024/56286-f5faa8fc-8506-46c9-bce0-51bbd85a0898.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/god/2024/56286-f5faa8fc-8506-46c9-bce0-51bbd85a0898.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/god2024-56286-modern-solutions-against-c","url":"https://api.media.ccc.de/public/events/f5faa8fc-8506-46c9-bce0-51bbd85a0898","conference_title":"German OWASP Day 2024","conference_url":"https://api.media.ccc.de/public/conferences/god2024","related":[],"recordings":[{"size":174,"length":1631,"mime_type":"video/webm","language":"eng","filename":"god2024-56286-eng-Modern_solutions_against_Cross-Site_Attacks_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2024-11-13T18:16:23.162+01:00","recording_url":"https://cdn.media.ccc.de/events/god/2024/webm-hd/god2024-56286-eng-Modern_solutions_against_Cross-Site_Attacks_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/81531","event_url":"https://api.media.ccc.de/public/events/f5faa8fc-8506-46c9-bce0-51bbd85a0898","conference_url":"https://api.media.ccc.de/public/conferences/god2024"},{"size":61,"length":1631,"mime_type":"video/webm","language":"eng","filename":"god2024-56286-eng-Modern_solutions_against_Cross-Site_Attacks_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2024-11-13T18:08:14.590+01:00","recording_url":"https://cdn.media.ccc.de/events/god/2024/webm-sd/god2024-56286-eng-Modern_solutions_against_Cross-Site_Attacks_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/81530","event_url":"https://api.media.ccc.de/public/events/f5faa8fc-8506-46c9-bce0-51bbd85a0898","conference_url":"https://api.media.ccc.de/public/conferences/god2024"},{"size":160,"length":1631,"mime_type":"video/mp4","language":"eng","filename":"god2024-56286-eng-Modern_solutions_against_Cross-Site_Attacks_fhd.mp4","state":"new","folder":"h264-fhd","high_quality":true,"width":1920,"height":1080,"updated_at":"2024-11-13T18:02:57.668+01:00","recording_url":"https://cdn.media.ccc.de/events/god/2024/h264-fhd/god2024-56286-eng-Modern_solutions_against_Cross-Site_Attacks_fhd.mp4","url":"https://api.media.ccc.de/public/recordings/81526","event_url":"https://api.media.ccc.de/public/events/f5faa8fc-8506-46c9-bce0-51bbd85a0898","conference_url":"https://api.media.ccc.de/public/conferences/god2024"},{"size":54,"length":1631,"mime_type":"video/mp4","language":"eng","filename":"god2024-56286-eng-Modern_solutions_against_Cross-Site_Attacks_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2024-11-13T17:58:03.335+01:00","recording_url":"https://cdn.media.ccc.de/events/god/2024/h264-sd/god2024-56286-eng-Modern_solutions_against_Cross-Site_Attacks_sd.mp4","url":"https://api.media.ccc.de/public/recordings/81522","event_url":"https://api.media.ccc.de/public/events/f5faa8fc-8506-46c9-bce0-51bbd85a0898","conference_url":"https://api.media.ccc.de/public/conferences/god2024"},{"size":24,"length":1631,"mime_type":"audio/mpeg","language":"eng","filename":"god2024-56286-eng-Modern_solutions_against_Cross-Site_Attacks_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2024-11-13T17:53:44.958+01:00","recording_url":"https://cdn.media.ccc.de/events/god/2024/mp3/god2024-56286-eng-Modern_solutions_against_Cross-Site_Attacks_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/81520","event_url":"https://api.media.ccc.de/public/events/f5faa8fc-8506-46c9-bce0-51bbd85a0898","conference_url":"https://api.media.ccc.de/public/conferences/god2024"},{"size":15,"length":1631,"mime_type":"audio/opus","language":"eng","filename":"god2024-56286-eng-Modern_solutions_against_Cross-Site_Attacks_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2024-11-13T17:53:25.445+01:00","recording_url":"https://cdn.media.ccc.de/events/god/2024/opus/god2024-56286-eng-Modern_solutions_against_Cross-Site_Attacks_opus.opus","url":"https://api.media.ccc.de/public/recordings/81519","event_url":"https://api.media.ccc.de/public/events/f5faa8fc-8506-46c9-bce0-51bbd85a0898","conference_url":"https://api.media.ccc.de/public/conferences/god2024"},{"size":255,"length":1631,"mime_type":"video/mp4","language":"eng","filename":"god2024-56286-eng-Modern_solutions_against_Cross-Site_Attacks_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2024-11-13T17:53:22.656+01:00","recording_url":"https://cdn.media.ccc.de/events/god/2024/h264-hd/god2024-56286-eng-Modern_solutions_against_Cross-Site_Attacks_hd.mp4","url":"https://api.media.ccc.de/public/recordings/81518","event_url":"https://api.media.ccc.de/public/events/f5faa8fc-8506-46c9-bce0-51bbd85a0898","conference_url":"https://api.media.ccc.de/public/conferences/god2024"}]}