React norway
proudly presents

React has your back, at least on paper. With almost no CVEs in recent years, React Core stands out as one of the most secure frontend frameworks available. But security isn’t automatic.

In this practical, hands-on session, Ramona will actively hack a React application to expose real-world threats like XSS, injection attacks, and subtle frontend vulnerabilities. You’ll learn where React protects you by default, where it doesn’t, and how to become the final line of defense for your users.

Let your application fly with an all-new TanStack Start, an all-new client-first full-stack framework in combination with TanStack AI, the cutting-edge AI integration platform that makes it simple to bring AI into your applications, not just with chat but with full multimedia capabilities, image and video generation, and more!

In this talk, together with Costa, you will explore lessons learned from maintaining one of the few open-source remote pair-programming apps designed for super-low latency.

Lessons like local caching in desktop apps and how it works, syncing state across different windows, measuring video latency hacks, and things he and his team wish they had known before they started, like how much they hate WebKit.

What if UX research could move as fast as your sprint cycles? In this talk, you’ll see how an automated, self-service testing framework built with Figma Make captured real user behavior at scale, delivering quantitative insights in days, not weeks. It’s a practical blueprint for embedding fast, “good enough” UX validation directly into modern product teams without slowing development down.

How much of your codebase is just sitting there unused? In this session, you’ll see how Sentry used Knip to uncover and safely remove dead files, exports, and dependencies; and what they learned from the messy edge cases along the way. Expect practical tactics you can apply immediately to declutter your frontend and keep it lean.

Frontend observability goes far beyond console logs and error boundaries. In this talk, you’ll learn how traces, metrics, logs, and correlation IDs fit into a modern enterprise observability strategy, and how to design React systems that are measurable and resilient from day one. Expect concrete patterns for integrating observability into CI/CD and building a culture of visibility across teams.

Some of the most important UX moments happen between click and render. In this session, you’ll explore how Async React and Next.js 16 help you architect loading states, errors, and transitions with intention; not as afterthoughts. Expect practical patterns for skeletons, error boundaries, and design-owned loading components that make your app feel faster, smoother, and more polished.

In this talk, together with Nico, we’ll explore how to build multimodal AI agents that understand voice, interpret images, hold short-term memory, and respond intelligently - all running entirely in the browser. No server, no cloud APIs, and no installation. Using modern tools like WebGPU and WebAssembly, we’ll see how far the open web has come in enabling real-time, privacy-preserving AI experiences.

Tired of boilerplate and guessing whether your data fetching is actually correct? This talk introduces Isograph, a compiler-driven framework that scans your codebase and generates exactly the queries and runtime artifacts your UI needs; no more, no less. With simple annotations for dynamic loading, pagination, and component-level code splitting, you’ll see how a compiler can eliminate whole classes of mistakes while making data-driven React apps more stable and performant by default.

God Bedring > Iversen > DATAROCK