Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://w3c.social/users/w3cdevs/statuses/114139031448489363">W3C Developers (w3cdevs@w3c.social)'s status on Thursday, 13-Mar-2025 06:36:02 JST</a><a href="https://w3c.social/@w3cdevs" title="w3cdevs@w3c.social"><img src="https://gnusocial.jp/avatar/132262-48-20230526104638.webp" width="48" height="48" alt="W3C Developers" style="position: absolute; left: 0; top: 0;">W3C Developers</a><div><ul><li><li><a href="https://gnusocial.jp/user/74522" title="torgo@mastodon.social">Daniel Appelquist</a></li><li><a href="https://gnusocial.jp/user/334435" title="simone@w3c.social">simone</a></li></ul></div></section><article><p>Based on the <a href="https://w3c.social/@w3c">@w3c</a> workshop "Secure the Web Forward” and thanks to work taking place in the W3C Security Web Application Guidelines (SWAG) <a href="https://w3c.social/tags/CommunityGroup" rel="tag">#CommunityGroup</a>, we are happy to release 6 videos that address the complexities of Content Security Policy and Trusted Types, by introducing open-source tooling that reduce uncertainty and complexity of configuring web <a href="https://w3c.social/tags/security" rel="tag">#security</a> mitigations against XSS.</p><p>▶️ <a href="https://www.w3.org/blog/2025/how-to-protect-your-web-applications-from-xss/" rel="nofollow noreferrer">https://www.w3.org/blog/2025/how-to-protect-your-web-applications-from-xss/</a> <br>cc <a href="https://w3c.social/@simone">@simone</a> <a href="https://mastodon.social/@torgo">@torgo</a></p><p>🎬 Security at W3C playlist: <a href="https://www.youtube.com/playlist?list=PLNhYw8KaLq2Wr27HLfSTD4d6JpC3G0PVr" rel="nofollow noreferrer">https://www.youtube.com/playlist?list=PLNhYw8KaLq2Wr27HLfSTD4d6JpC3G0PVr</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/4721357#notice-9246008">In conversation</a><time datetime="2025-03-13T06:36:02+09:00" title="Thursday, 13-Mar-2025 06:36:02 JST">about 23 days ago</time> <span>from <span><a href="https://w3c.social/@w3cdevs/114139031448489363" rel="external" title="Sent from w3c.social via ActivityPub">w3c.social</a></span></span><a href="https://w3c.social/@w3cdevs/114139031448489363">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: www.w3.org</div><h5><a href="https://www.w3.org/blog/2025/how-to-protect-your-web-applications-from-xss/">How to protect your Web applications from XSS</a></h5><div></div></header><div>The W3C SWAG (Security Web Application Guidelines) Community Group, launched in June 2024, aims to simplify security features in web app development. SWAG's mission is to enhance web app security by creating best practices for developers and fostering collaboration. A key output includes videos on configuring CSP and Trusted Types, which mitigate XSS. Based on Google’s adoption experience, these resources offer tools to help developers securely configure these protections with minimal effort.</div><footer></footer></article></li><li><article><header><img height="128" width="128" src="https://gnusocial.jp/thumbnail/4289897?w=128&amp;h=128"><h5><a href="https://www.youtube.com/playlist?list=PLNhYw8KaLq2Wr27HLfSTD4d6JpC3G0PVr">Security at W3C</a></h5><div> from <span>W3C</span></div></header><div>作成した動画を友だち、家族、世界中の人たちと共有</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
W3C Developers (w3cdevs@w3c.social)'s status on Thursday, 13-Mar-2025 06:36:02 JSTW3C Developers
Based on the @w3c workshop "Secure the Web Forward” and thanks to work taking place in the W3C Security Web Application Guidelines (SWAG) #CommunityGroup, we are happy to release 6 videos that address the complexities of Content Security Policy and Trusted Types, by introducing open-source tooling that reduce uncertainty and complexity of configuring web #security mitigations against XSS.
▶️ https://www.w3.org/blog/2025/how-to-protect-your-web-applications-from-xss/
cc @simone @torgo
🎬 Security at W3C playlist: https://www.youtube.com/playlist?list=PLNhYw8KaLq2Wr27HLfSTD4d6JpC3G0PVr
In conversationabout 23 days ago from w3c.socialpermalink
Attachments
1. Domain not in remote thumbnail source whitelist: www.w3.org
  How to protect your Web applications from XSS
  The W3C SWAG (Security Web Application Guidelines) Community Group, launched in June 2024, aims to simplify security features in web app development. SWAG's mission is to enhance web app security by creating best practices for developers and fostering collaboration. A key output includes videos on configuring CSP and Trusted Types, which mitigate XSS. Based on Google’s adoption experience, these resources offer tools to help developers securely configure these protections with minimal effort.
2. Security at W3C
  from W3C
  作成した動画を友だち、家族、世界中の人たちと共有

Public

Embed Notice

HTML Code

Corresponding Notice