Log in to watch this talk
You need to be logged in to access this video. If you don't have an account, purchase a virtual pass for the latest php[tek] conference to get access to the full video library.
Secure by Design – Hardening JavaScript Applications in 2026
Bhaskar Bharat Sawant
PHP Tek 2026
Intermediate (some prior knowledge necessary)
Standard (50 minutes)
Abstract With JavaScript powering everything from critical APIs to mobile apps, security remains a pressing challenge. Supply chain vulnerabilities, XSS, CSRF, and dependency risks continue to dominate the landscape. In this session, I’ll present a framework for securing JavaScript applications end-to-end—covering package hygiene, runtime protections, and front-end defense patterns. Using real-world incidents as case studies, we’ll explore how teams applied automated dependency scanning, Content Security Policies (CSP), and sandboxed workers to minimize risk. Attendees will walk away with practical security playbooks tailored for modern JavaScript stacks. What’s your talk about? How to integrate security best practices directly into the JavaScript development lifecycle—shifting from reactive patching to proactive resilience. What audience will get: • Proven strategies for preventing supply chain and runtime attacks • Practical steps to enforce front-end and API security • Framework for embedding security checks in CI/CD pipelines Target audience: JavaScript developers, security engineers, DevSecOps practitioners, and engineering leaders.
