Writing secure JavaScript

In my speech I want to talk about web security and how to write secure JavaScript. I will talk about how small bugs have opened huge vulnerabilities even in big companies like Google and Cloudflare.

What are the common and uncommon vulnerabilities in JS full stack applications (XSS, header poisoning, SQLi, clickjacking, directory traversal, RCE, open redirects and more), with real life examples, and how to detect, prevent and mitigate such vulnerabilities.

And at the end I'll give a short talk about how to set up a secure coding environment and why it's important (static code analysis, environment configuration, dependency management).