When we think about security, we usually focus on backend applications and servers. They all get their safe spot within VPC or behind firewalls. Access is restricted by VPNs, systems are up to date and every action is audited ;)

But what about the frontend applications? A few years ago "frontend" was just a view generated by our backend servers, but now … we've moved toward Single Page Applications, with lots of Java Script and business logic moved there. We build it and allow anyone to run it. But what about their runtime environment? Is it secure? Is it up to date? How easily can it be hacked? 

In this presentation, I want to show you, that YES! - we should care about runtime for our frontends! I’ll also show how to use mechanisms build into the browsers that can help us, secure our users.