As a penetration tester, Dave Reeves' approach towards software development comes from an unconventional mindset. His journey into infosec started while living abroad in China, with experiences such as mastering Mandarin Chinese, engaging Russian hackers online and pursuing a job at Google unpinning the non-linear approach to understanding the unexpected when it comes to security in software.
This talk covers the broader concepts of web application security surrounding the issue of JavaScript injection attacks; from developing the code and infrastructure necessary for exploiting it during penetration testing, understanding browser security, HTTP security headers, to exploring successful remediation methods and secure development processes.