Liran Tal

Liran Tal is a software developer, and a GitHub Star, world-recognized for his activism in open source communities and advancing web and Node.js security. He engages in security research through his work in the OpenJS Foundation and the Node.js ecosystem security working group, and further promotes open source supply chain security as an OWASP project lead. Liran is also a published author of Essential Node.js Security and O'Reilly's Serverless Security. At Snyk, he is leading the developer advocacy team and on a mission to empower developers with better dev-first security.

Snyk, Israelliran_tal lirantal

How React Applications Get Hacked in the Real-World

React Summit 2022

7 min

How React Applications Get Hacked in the Real-World

React has a great security standard as default, but if you don’t pay close attention to the details you could get burned by some of the escape hatches APIs, or even by just passing props insecurely to components. I’ll teach you how to avoid these pitfalls.

Security Controls in the JavaScript Supply Chain

JSNation 2022

28 min

Security Controls in the JavaScript Supply Chain

The omnipresence of open-source software and low-barrier of entry on npmjs are serving as a catalyst for supply chain security incidents that are continuously impacting JavaScript developers. What can we do to protect ourselves?

yarn security npm

Are we Forever Doomed to Software Supply Chain Security?

TestJS Summit 2021

17 min

Are we Forever Doomed to Software Supply Chain Security?

The adoption of open-source software continues to grow and creates significant security concerns for everything from software supply chain attacks in language ecosystem registries to cloud-native application security concerns. In this session, we will explore how developers are targeted as a vehicle for malware distribution, how immensely we depend on open-source maintainers to release timely security fixes, and how the race to the cloud creates new security concerns for developers to cope with, as computing resources turn into infrastructure as code.

testing security testing

Let Me Show You How React Applications Get Hacked in the Real-World

React Advanced 2021

22 min

Let Me Show You How React Applications Get Hacked in the Real-World

Top Content

Modern frontend frameworks like React are well thought-of in their application security design and that’s great. However, there is still plenty of room for developers to make mistakes and use insecure APIs, vulnerable components, or generally do the wrong thing that turns user input into a Cross-site Scripting vulnerability (XSS). Let me show you how React applications get hacked in the real-world.

react security xss

You thought your React application is secure? Think again

React Finland 2021

42 min

You thought your React application is secure? Think again

react security xss

Securing Node Applications with Automated Security Testing in CI/CD

Node Congress 2021

71 min

Securing Node Applications with Automated Security Testing in CI/CD

Workshop

We’ve all heard the buzz around pushing application security into the hands of developers, but if you’re like most companies, it has been hard to actually make this a reality. You aren’t alone - putting the culture, processes, and tooling in place to make this happen is tough - especially for sophisticated applications. Join Scott Gerlach (CSO, StackHawk) and Liran Tal (Developer Advocate, Snyk) as they dive into how you can add AppSec testing to your CI/CD pipeline to ship secure code faster.
Prerequisites:Docker is a nice to have

node.js security testing

Panel Discussion: Application Security Testing

TestJS Summit - January, 2021

30 min

Panel Discussion: Application Security Testing

panel discussions security testing