OWASP Top 10 for JavaScript Developers

The OWASP Top 10 is a powerful awareness document for web application security. It represents a broad consensus about the most critical security risks to web applications.

With the release of the OWASP TOP 10 2017 we saw new issues rise as contenders of most common issues in the web landscape. Much of the OWASP documentation displays issues, and remediation advice/code relating to Java, C++, and C#; however not much relating to JavaScript. JavaScript has drastically changed over the last few years with the release of Angular, React, and Vue, alongside the popular use of NodeJS and its libraries/frameworks. This talk will introduce you to the OWASP Top 10 explaining JavaScript client and server-side vulnerabilities.

Lewis Ardern is a Senior Security Consultant at Synopsys. His primary areas of expertise are in web security and security engineering. Lewis enjoys creating and delivering security training to various types of organizations and institutes in topics such as web and JavaScript security. He is also the founder of the Leeds Ethical Hacking Society and has helped develop projects such as bXSS (https://github.com/LewisArdern/bXSS) and SecGen (https://github.com/cliffe/secgen).

Testing Vue applications can be quick and painless. In this presentation, Grant will show you how to test small parts of Vue apps using vue-test-utils and Jest. By the end of the presentation, you will be able to:

• Know the difference between unit and end-to-end tests
• Learn how to write good unit tests (BDD)
• know how to spy and stub network requests
• See how to reach deep inside your Vue application to control its behavior during tests

In short - less than one hour spent at this meetup will save you days, if not weeks of testing your application using any other tool.

Grant Stampfli is a software engineer interested in front and back end development, especially in using JavaScript (and its flavors) across the entire stack. He works at a startup called Fleet Logistics, making the world a better place by digitalizing the freight forwarding industry.

Want to speak, host, or sponsor? Reach out and let us know at [email protected]!

Converting a Legacy Swing-based Application to the Web

The goal: convert a 20-year-old legacy Swing- and Java-based fat client application to the web. The constraint: insufficient time and budget to do it in one step. The solution: incrementally evolve the application by rewriting one UI (of several) in Vue and embedding that UI within the Swing environment via the JxBrowser Chrome-based browser utility.

Mark Linehan has multiple decades of software development experience in many different programming languages, principally with IBM. He currently does both front-end development in Vue and JavaScript, and back-end work in Java. The project described here is continuing at Daimler Trucks North America.

Accelerating Application Development with the Vuetify Component Library

This talk will give you an overview of the Vuetify component library and how it can free developers from coding simple web and form components so they can focus on application logic.

Michael's work in technology spans more than 30 years, two continents, and many different disciplines, from development to marketing. Although most of his work involves full stack development, his current position focuses on front end web and email for Yes Marketing, an email-centered agency. Personal projects include a stable of travel-related web sites, and these provide a test bed for new skills and technology. The prototype app he will present today is part of his effort to expand his skill set with Vue.js

Schedule: 6:00pm Doors Open 6:30pm "Converting a Legacy Swing-based Application to the Web" 7:00pm A short break 7:10pm "Accelerating Application Development with the Vuetify Component Library" 7:40pm Post-event Mingling

Learn how to build a todo list as a single page application (SPA) from scratch using Django, Vue, Axios, and Bootstrap. No prior knowledge is required, but basic knowledge of these four libraries will help clarify things. Django: https://docs.djangoproject.com/en/3.1/intro/tutorial01/ Vue: https://vuejs.org/v2/guide/ Axios: https://github.com/axios/axios Bootstrap: (only 3 links allowed in description ;), check out the meetup page for more) Presented by PDX Code Guild Instructor Matthew Cooper

In this Tech Talk, we will build a modern, decoupled, full-stack application with Vue and Flask. Starting with the front-end, we'll cover the basics of the Vue CLI using Vuetify and the Vue router to build a single page application. Then, on the back-end, we'll implement an API with Flask to store and retrieve data in a database.

Presented by PDX Code Guild Instructor Matthew Cooper

The CascadiaJS conference is taking place on Nov 3 & 4. There are two ways to attend:

1. Online
2. At the in-person hybrid event here in PDX!

Some details about the in-person event: - Must be vaccinated at least two weeks prior to conference. - Watch Party at the OMSI. - Catering (coffee, snacks and lunch) - Opening and Closing after parties (7pm+ PT)

The closing party with be at Voicebox SE. We have the entire place to ourselves, so come and relax in a safe space and have fun!