Table of Contents for
Security and Frontend Performance
Close
Version ebook
/
Retour
Security and Frontend Performance
by Sabrina Burney
Published by O'Reilly Media, Inc., 2017
nav
Cover
Free ebooks and reports
Security and Frontend Performance
Security and Frontend Performance
1. Understanding the Problem
2. HTTP Strict-Transport-Security
3. iFrame and Content‑Security‑Policy
4. Web Linking
5. Obfuscation
6. Service Workers: An Introduction
7. Service Workers: Analytics Monitoring
8. Service Workers: Control Third Party Content
9. Service Workers: Other Applications
10. Summary
About the Authors
1. Understanding the Problem
Challenges of Today: Rise of Third Parties
Web Traffic
Attacks on the Rise
Technology Trends
Start at the Browser
2. HTTP Strict-Transport-Security
What Is HSTS?
The Parameters
Last Thoughts
3. iFrame and Content‑Security‑Policy
Third Party Risks
The Basics: <script>
Improving Frontend Performance
<script> Versus <iframe>
<script> and Content-Security-Policy
<script> Versus <iframe> Versus CSP
Reenforcing Security at the Browser
Sandboxing
Inline Code
Referrer Policies
Last Thoughts
4. Web Linking
Prefetch and Preload
Where Does Security Fit In?
Last Thoughts
5. Obfuscation
Learn from Our Attackers
Alternative Application: URL Obfuscation
Concept
URL Obfuscation Benefits
Privacy
Single Point of Failure
Improved Delivery Time
Content-Security-Policy
Last Thoughts
6. Service Workers: An Introduction
What Are Service Workers?
Gotchas!
7. Service Workers: Analytics Monitoring
Performance Monitoring Today
Track Metrics with Service Workers
Where Do Performance and Security Fit In?
Last Thoughts: Now Versus the Future
8. Service Workers: Control Third Party Content
Client Reputation Strategies
Move to Service Worker Reputation Strategies
A Closer Look
Last Thoughts
9. Service Workers: Other Applications
Input Validation
Geo Content Control
A Closer Look
Last Thoughts
10. Summary
What Did We Learn?
Last Thoughts