# Char Wars: The Path Traversal Strikes Back | Talk by Liran Tal

Node.js & web security talk by Liran Tal, delivered 6 times (2022–2023). Recording available.

Canonical: https://lirantal.com/speaking/talks/char-wars-the-path-traversal-strikes-back

[Talks](/speaking/talks) · [Node.js & web security](/speaking/talks?topic=nodejs-web) · 2022–2023

# Char Wars: The Path Traversal Strikes Back

[Play](https://youtube.com/watch?v=fRaqphtBJfQ)

Recorded at [NodeTLV](/speaking/events/2023-06-28-nodetlv) , Jun 2023 · 3 recordings in total, listed below

## The topic

Live hacking of Node.js, React and TypeScript applications: path traversal, prototype pollution, injection and how to fix them.

## Where it's been given, and where it's next

1.  [Jun 2023

    ### NodeTLV

    🇮🇱 Tel Aviv, Israel

    Conference Recording available

    ](/speaking/events/2023-06-28-nodetlv)
2.  [Jun 2023

    ### Future Frontend

    🇫🇮 Pörssitalo, Helsinki, Finland

    Conference

    ](/speaking/events/2023-06-09-future-frontend)
3.  [May 2023

    ### JSDay Canarias

    🇪🇸 San Cristóbal de La Laguna, Canary Islands, Spain

    Conference

    ](/speaking/events/2023-05-28-jsday-canarias)
4.  [May 2023

    ### JSHeroes

    🇷🇴 Cluj-Napoca, Romania

    Conference Recording available

    ](/speaking/events/2023-05-19-jsheroes)
5.  [Mar 2023

    ### CityJS London 2023

    🇬🇧 London, United Kingdom

    Conference

    ](/speaking/events/2023-03-28-cityjs-london-2023)
6.  [Oct 2022

    ### NodeConf EU

    🇮🇪 Kilkenny, Ireland

    Conference Recording available

    ](/speaking/events/2022-10-05-nodeconf-eu)

6 delivered.

## From the stage

*    [![Photo from NodeTLV](https://raw.githubusercontent.com/lirantal/public-speaking/main/images/2023/2023-06-28-1.jpg) NodeTLV](https://raw.githubusercontent.com/lirantal/public-speaking/main/images/2023/2023-06-28-1.jpg)
*    [![Photo from NodeTLV](https://raw.githubusercontent.com/lirantal/public-speaking/main/images/2023/2023-06-28-2.jpg) NodeTLV](https://raw.githubusercontent.com/lirantal/public-speaking/main/images/2023/2023-06-28-2.jpg)
*    [![Photo from NodeTLV](https://raw.githubusercontent.com/lirantal/public-speaking/main/images/2023/2023-06-28-3.jpg) NodeTLV](https://raw.githubusercontent.com/lirantal/public-speaking/main/images/2023/2023-06-28-3.jpg)
*    [![Photo from NodeTLV](https://raw.githubusercontent.com/lirantal/public-speaking/main/images/2023/2023-06-28-9.jpg) NodeTLV](https://raw.githubusercontent.com/lirantal/public-speaking/main/images/2023/2023-06-28-9.jpg)
*    [![Photo from NodeTLV](https://raw.githubusercontent.com/lirantal/public-speaking/main/images/2023/2023-06-28-8.jpg) NodeTLV](https://raw.githubusercontent.com/lirantal/public-speaking/main/images/2023/2023-06-28-8.jpg)
*    [![Photo from NodeTLV](https://raw.githubusercontent.com/lirantal/public-speaking/main/images/2023/2023-06-28-5.jpg) NodeTLV](https://raw.githubusercontent.com/lirantal/public-speaking/main/images/2023/2023-06-28-5.jpg)
*    [![Photo from NodeTLV](https://raw.githubusercontent.com/lirantal/public-speaking/main/images/2023/2023-06-28-7.jpg) NodeTLV](https://raw.githubusercontent.com/lirantal/public-speaking/main/images/2023/2023-06-28-7.jpg)
*    [![Photo from NodeTLV](https://raw.githubusercontent.com/lirantal/public-speaking/main/images/2023/2023-06-28-6.jpg) NodeTLV](https://raw.githubusercontent.com/lirantal/public-speaking/main/images/2023/2023-06-28-6.jpg)
*    [![Photo from NodeTLV](https://raw.githubusercontent.com/lirantal/public-speaking/main/images/2023/2023-06-28-4.jpg) NodeTLV](https://raw.githubusercontent.com/lirantal/public-speaking/main/images/2023/2023-06-28-4.jpg)

## Book this talk

Delivered

6 times

Given

2022–2023

Formats

Conference

Languages

Hebrew, English

Countries

🇮🇱 🇫🇮 🇪🇸 🇷🇴 🇬🇧 🇮🇪

[Invite me to give this talk](https://www.linkedin.com/in/talliran) [or message me on X](https://x.com/liran_tal)

Booking 2027

## Tell me about your event.

Conference keynote, meetup talk, workshop or podcast: send me the audience, the format and the dates, and I'll tailor a session to fit.

[Invite me to speak](https://www.linkedin.com/in/talliran) [Message me on X](https://x.com/liran_tal) [Browse the talks](/speaking/talks)
