Fortifying WKWebView: Security Checklist for iOS Engineers | Valeriy Popov | Tech Lead at FAANG
The native iOS ecosystem is well-regarded for its strong security, featuring app sandboxing, a statically typed language for the development, and libraries built with security in mind. However, developers occasionally need to venture beyond the native environment to incorporate web parts. WebKit offers valuable support for securing these integrations. In this talk, I provide a practical checklist tailored for iOS engineers, who may not be security experts, to guide them in securely integrating web views into their applications.
What you'll learn from this talk:
• Configuring WKWebView: establishing secure transport, managing cookies effectively, and serving html/css assets securely
• A brief look at common attacks and strategies to defend against them
• Methods for crafting a secure JavaScript bridge between Web and Native
• A discussion of native APIs safe for web calls and those to avoid for minimizing security risks and maintaining app integrity
🔗 Link to the event page
https://www.codementor.io/events/fortifying-wkwebview-security-checklist-for-ios-engineers-gzc8azm917
📆 Next event: Essential Algo Concepts: Permutations vs Combinations
https://www.codementor.io/events/essential-algo-concepts-permutations-vs-combinations-gztfnvhv0x
💻 Find a coding mentor
https://www.codementor.io/
—-
Follow Valeriy on his socials:
📝 Linkedin: https://www.linkedin.com/in/valerii-popov-2b151061/
🐦 Twitter: https://twitter.com/complexityclass
😺 GitHub: https://github.com/complexityclass
—-
👋 Stay connected with us on social:
Twitter: https://twitter.com/codementorIO
LinkedIn: https://www.linkedin.com/company/codementor/
Facebook: https://www.facebook.com/codementor
#Developer #mobiledevelopment
Видео Fortifying WKWebView: Security Checklist for iOS Engineers | Valeriy Popov | Tech Lead at FAANG канала Codementor
What you'll learn from this talk:
• Configuring WKWebView: establishing secure transport, managing cookies effectively, and serving html/css assets securely
• A brief look at common attacks and strategies to defend against them
• Methods for crafting a secure JavaScript bridge between Web and Native
• A discussion of native APIs safe for web calls and those to avoid for minimizing security risks and maintaining app integrity
🔗 Link to the event page
https://www.codementor.io/events/fortifying-wkwebview-security-checklist-for-ios-engineers-gzc8azm917
📆 Next event: Essential Algo Concepts: Permutations vs Combinations
https://www.codementor.io/events/essential-algo-concepts-permutations-vs-combinations-gztfnvhv0x
💻 Find a coding mentor
https://www.codementor.io/
—-
Follow Valeriy on his socials:
📝 Linkedin: https://www.linkedin.com/in/valerii-popov-2b151061/
🐦 Twitter: https://twitter.com/complexityclass
😺 GitHub: https://github.com/complexityclass
—-
👋 Stay connected with us on social:
Twitter: https://twitter.com/codementorIO
LinkedIn: https://www.linkedin.com/company/codementor/
Facebook: https://www.facebook.com/codementor
#Developer #mobiledevelopment
Видео Fortifying WKWebView: Security Checklist for iOS Engineers | Valeriy Popov | Tech Lead at FAANG канала Codementor
Показать
Комментарии отсутствуют
Информация о видео
Другие видео канала
![A Pep-Talk For the Tortoise Learners of Software Development | Seif Sekalala | SN Ventures](https://i.ytimg.com/vi/kUe8p3Lh-Lw/default.jpg)
![Arquitecturas Con Angular Que Deberías Conocer | Jesus Cuesta | Deloitte España](https://i.ytimg.com/vi/bNoFsVR7m1U/default.jpg)
![Intro to contemporary exploratory testing: A demo session | Maaret Pyhäjärvi from Vaisala](https://i.ytimg.com/vi/CQTuI5y2NFI/default.jpg)
![What is Python? | Ayaz Salikhov | Software Engineer and Maintainer at Project Jupyter](https://i.ytimg.com/vi/jezEsfteTbA/default.jpg)
![How to Build Internal Tools in a Weekend | Egor Romanov | SDET Lead at Supabase](https://i.ytimg.com/vi/peJyWZ0O5jg/default.jpg)
![Generative AI - The science behind ChatGPT and MidJourney | Anshul Singhle | ML Engineer @ Sharechat](https://i.ytimg.com/vi/TDhFv2MIOcA/default.jpg)
![Engineering Management 101: Time Management](https://i.ytimg.com/vi/OnoRFaX1SR8/default.jpg)
![Codementor Office Hours with Ben Edmunds: Building Modern and Secure PHP Applications](https://i.ytimg.com/vi/s0faHjIf0jM/default.jpg)
![Improve Product Quality Using CI/ CD Pipeline | Balraj Singh | Senior S/W Engineer@Meta(Facebook)](https://i.ytimg.com/vi/1umVmGpgeB4/default.jpg)
![Future of Multimedia Protection | Sajjad Bagheri Baba Ahmadi](https://i.ytimg.com/vi/BO5PCU46U8U/default.jpg)
![AngularJS Directives - Codementor Office Hours with Tero Parviainen](https://i.ytimg.com/vi/FNwoecelLDM/default.jpg)
![Adding Metaprogramming Support to Swift Project | Ivan Goremykin | iOS Software Engineer at Revolut](https://i.ytimg.com/vi/FPYwhSGeWk0/default.jpg)
![AB Experimentation in Layman's Terms | Andrey Rotchev | Software Engineer at Meta](https://i.ytimg.com/vi/K9Czpel9vg4/default.jpg)
![Machine Learning with TensorflowJS | Aileen Villanueva | Senior Front-End Developer @ Endava](https://i.ytimg.com/vi/cZpivEIaqrs/default.jpg)
![How to Launch a Tech Startup and Raise Financing | Lasha Bokuchava | Co-founder, CFO & COO of YaizY](https://i.ytimg.com/vi/MnEMTtvMmIY/default.jpg)
![Sencha Ext JS 101: Building Apps for Multiple Platforms](https://i.ytimg.com/vi/-nrbZmzQDIQ/default.jpg)
![[TRAILER] Women In Tech: Establish and grow your developer career | Erica Thompson | Codementor](https://i.ytimg.com/vi/75qEv8R_Qe4/default.jpg)
![Advanced .NET MAUI | Jesse Liberty | Sr. Software Engineer for CNH Industries / Author](https://i.ytimg.com/vi/PQ06PMIag2g/default.jpg)
![Client-First Architecture: Backends for Frontends | Chibuike Nwachukwu | Fullstack Engineer @emailOS](https://i.ytimg.com/vi/0bmcBgKUowg/default.jpg)
![ML Governance: A Practical Guide | Meissane Chami / Ryan Dawson](https://i.ytimg.com/vi/1YpYu6DA83Q/default.jpg)
![Tech interviews: Best practices from an Engineering Manager | Barret Blake](https://i.ytimg.com/vi/z0kQUfUNKzI/default.jpg)