PHP UK Conference 2018 - Dheeraj Joshi - Content Security Policy to the Rescue

This talk focuses on developing secure web applications in an era of rising online threats, particularly emphasizing the role of Content Security Policy (CSP) as a defense mechanism against Cross-Site Scripting vulnerabilities. The speaker presents a live demonstration of a deliberately vulnerable web application to illustrate how CSP can effectively prevent various attacks. They also share successful case studies from companies that have implemented CSP, while discussing common bypass techniques and additional security issues that CSP can address, including clickjacking, HTTPS migration, and secure form submissions.