Presentation on HTML5 Security, Part-2 - OWASP Hyd 12 August 2012 novogeek (0) In continuation my previous talk on HTML5 Security at OWASP Hyd, I have covered few more interesting concepts at OWASP Hyd August meet. Slides are more or less the same as my previous session but it was more demo driven where I've shown known security problems and secure coding practi... [More]
A note on JSONP & misconceptions of Cross Origin AJAX 18 July 2012 novogeek (0) Web developers who have worked on accessing APIs using JavaScript would be very much familiar with the term “JSONP”. Many web devs whom I have met offline or in online discussion forums seem to have some misconceptions about JSONP. Below are some of the basic & common definitions whi... [More]
Browser Internals: Content Isolation with Same Origin Policy-Microsoft UG Dev Day 30 June 2012 novogeek (0) Microsoft User Group Hyderabad (MUGH) has organized Developer Day at Broadridge Financial Solutions, Hyderabad this weekend. It was a half day event with very good line up of sessions and I had the opportunity to present on a very exciting topic-"Content Isolation with Same Origin Pol... [More]
Presentation on HTML5 Security-OWASP Hyderabad 22 May 2012 novogeek (0) Happy to say that I had the opportunity to present at OWASP Hyderabad chapter on "HTML5 Security" on 19th May, 2012. The event had awesome audience from diverse backgrounds in security domain-security researchers, penetration testers, security consultants, few developers etc. The talk went for about... [More]
JSFoo Chennai 2012–”JavaScript is mischievous. Handle 3rd party content with care!” 20 February 2012 novogeek (1) It is always exciting to attend a technical conference focusing on a particular theme and even more if you get the opportunity to present. Continuing their good run, HasGeek has organized JsFoo Chennai 2012, India’s first JavaScript conference series, at IIT Madras Research park. There were se... [More]
It is this easy to steal your click!-DevCon 2011 03 October 2011 novogeek (0) A presentation on Clickjacking attacks & defenses [More]
The need for HTML5 postMessage API 27 September 2011 novogeek (0) The postMessage API in HTML5 specification is useful for making cross domain calls across frames. This is typically useful for mashups, Web 2.0 sites (e.g., pageflakes.com) where different widgets might need to communicate with each other. Few developers have already started using HTML5 postMessa... [More]
Frame navigation policies in web browsers | One big reason why you should get rid of old browsers 31 August 2011 novogeek (1) Whether you are aware or not, frames are commonly used in most of the websites we use, for various purposes such as widgets in mashups, containers for advertisements, at the least for loading arbitrary documents into web pages. To serve this purpose <iframe> is used, while <frameset> and... [More]