• Non Alphanumeric JavaScript by theharmonyguy
• Our Favorite XSS Filters and how to Attack Them
• Cross Site Location Jacking

Non Alphanumeric JavaScript by theharmonyguy

theharmonyguy gave a talk on non alphanumeric javascript in Nova Hackers (October 2010).

Our Favorite XSS Filters and how to Attack Them

Download the latest version from http://p42.us/fav_xss view online here. A talk in Blackhat USA 2009.

Cross Site Location Jacking

Two authors of this book, thornmaker and sirdarckcat gave a talk on "Cross Site Location Jacking" in OWASP AppSec Sweeden 2010 that talks about security consequences of HTTP redirects and URL Parsing.