Node + JS Interactive 2019

18 years have passed since Cross-Site Scripting (XSS) became the single most common security problem in web applications. Since then, numerous efforts have been proposed to detect, fix or mitigate it, but these piecemeal efforts have not combined to make it easy to produce XSS-free code.

This talk introduces Trusted Types (being implemented in browsers) and explains how Google’s security team has achieved a high-level of safety against XSS and related problems by integrating tools to make it easier for developers to produce secure software than vulnerable, and to bound the portion of a codebase that could contribute to a vulnerability.

We will show how this works in practice and end with advice on how to achieve the same results on widely-used, open-source stacks and new browser mechanisms that will make it much easier to achieve high-levels of security with good developer experience.

Learn to build and deploy cloud-native Node.js applications on Kubernetes and OpenShift through a series of hands-on lab examples.

This interactive session involves using kubectl, oc, curl, and common command-line tools to interact with Kubernetes APIs. By the end of this lab, you’ll be deploying, scaling, and automating JS-based distributed solutions using containers, Kubernetes, and other popular open source tools for distributed computing.

These examples are designed to show JS developers how to maintain speed and productivity with a container-based development workflow.

The number of IoT devices is expected to be around 18 billion by 2022 and be a market of over $500 Billion. Edge computing is becoming an even bigger requirement. As a versatile language, JavaScript is in a great position to power many of these devices. This session will explore why and where JavaScript is being used in this industry segment and specifically the role that Node.JS plays in the Internet of Things.

Data collection in the IoT arena comes in fast and from a variety of sensors and devices. How to model that data is important for analysis downstream. We’ll also take a look at some different schema design patterns to think about when storing the data in a modern database, like MongoDB.

Getting students to practice piano - or any instrument - can be a challenge, but combining learning with technology and games in an interactive way can make practice more enticing. With a digital keyboard, JavaScript, and the Web MIDI API, Jan created a web app to help her kids practice reading music. Through demos and an exploration of how the app was built, you'll learn the basics of MIDI and the Web MIDI API and maybe a thing or two about reading music, too!

What if the JAMstack (JavaScript, APIs, Markup) could run on the distributed web? Meet IPFS, or the Inter-Planetary File System, a new way to serve static files and apps in a distributed way.

Come to this session and see how you can run your own static JavaScript apps on IPFS, and make them ready for primetime. You’ll learn how to ensure high availability for your app, making it accessible to anyone over HTTPS (thanks Cloudflare!), and how to enable Continuous Integration and Continuous Delivery (using Azure Pipelines).

For many web developers the world of hardware is very intimidating. There is no easy way to go back from a broken to a working project state. You break something, you replace it — there is no Ctrl/Cmd + z. However, getting a project to work is incredibly fun and rewarding.

From an API for your coffee machine to a porg that screams every time your webpack build fails to playing games with hundreds of people at the same time, the only limit is your imagination*.

You might not leave this talk with a degree in Electrical Engineering**, but you'll learn useful basics to help you enter the wonderful world of hardware. We'll look at different ways to combine JS and hardware, from APIs all the way to JS enabled microcontrollers. All tied up with some live demos. At the end you won't be able to wait to start your own hardware adventure!

*and maybe your patience
**unless you already have one