Test the Web Forward Portland


If you live in the Portland area, are coming to town for CascadiaJS 2014 and Dev Week PDX, or just fancy a visit to the beautiful Rose City, come join us Sunday, August 3rd for Test the Web Forward Portland 2014.

Serious front-end developers know that security is not just for server-side code anymore. Come learn how Content Security Policy works to help stop XSS in your apps from expert Ian Melven of New Relic, who contributed to the implementation for Mozilla Firefox. Then learn to write tests that will help you explore CSP, make it better and more interoperable, and perhaps even find a bypass we haven't thought of yet.



8:30am - 9:00am

Registration and Welcome Breakfast

9:00am - 9:30am

Intro and Keynote

9:30am - 10:00am

How to Create a W3C Reftest

10:00am - 10:30am

Overview of Testharness.js

10:30am - 12:00pm

Test Sprint

12:00pm - 1:00pm


1:00pm - 5:30pm

Test Sprint

5:30pm - 6:00pm

Wrap up


Avatar of Ian Melven

Ian Melven

New Relic

Avatar of Brad Hill

Brad Hill

PayPal, Web Application Security WG


Avatar of Kris Krueger

Kris Krueger

Microsoft, HTML Working Group


New Relic, Portland
111 SW 5th Ave #2800
Portland, OR, 97204


You must be able to hand code HTML, JavaScript and CSS to participate. Please bring your own laptop.

Before you begin

Please complete the following in preparation for the event:

  • GitHub Setup
  • Choose your favorite text editor or IDE
  • Install all major browsers (such as Chrome, Firefox, Internet Explorer, or Opera)
  • Be sure you have testharness.js

If you have problems with setup, experts can help you at the event.

Prior to attending, you will want to read and become familiar with at least one of the specs so that you have the foundation required to participate.

Here are the specs we will focus on learning and testing:


You may also choose any other W3C spec that interests you.

If you want to write tests for CSP, you should also either install PHP and Apache on your local system, or have an SSH client and public key so we can give you access to a preconfigured test server.


PayPal New Relic