#web-security (31)
- How Authentication and Security Systems Work: Deep Dive into Internals
Deep technical explanation of how modern authentication and security systems work under the hood - architecture, internals, and real-world usage for software engineers.
- Node.js Security: Authentication, Authorization, Best Practices
Apply authentication, authorization, and security best practices to build robust, secure Node.js backend applications and mitigate vulnerabilities.
- Designing Secure Angular Applications: Best Practices
After this chapter, you will be able to design and implement secure Angular applications, protecting them from common web vulnerabilities.
- Frontend Security & Threat Modeling for React Applications
Master proactive frontend security and threat modeling to build robust React applications resistant to common attack vectors like XSS and CSRF.
- Frontend Security: CSP, XSS, and Token Storage
Learn how to secure your Angular applications with CSP, XSS protection, and token storage.
- Frontend Security: Protecting Your Application and Users
Learn essential frontend security practices for React applications, including XSS prevention and CSP implementation.
- Security Best Practices for React Applications
Learn essential security best practices for React applications, including protecting against XSS and CSRF.
- How Content Security Policy (CSP) Works: Deep Dive into Internals
A deep dive into Content Security Policy, its architecture, enforcement mechanisms, and how it prevents XSS and clickjacking attacks.
- CSRF Attacks: Browser Mechanisms, Exploits, and Defenses
Learn how Cross-Site Request Forgery attacks exploit browser trust and session cookies, understand their internal mechanisms, and apply robust defenses to secure web apps.
- The HTTP Protocol, Web Architecture, and Reconnaissance
Learn the HTTP protocol, web architecture, and reconnaissance techniques essential for web security.
- Web Security Foundations: Threat Landscape and Attacker Mindset
Readers will learn fundamental web security principles, understand the evolving threat landscape, and grasp the crucial mindsets of attackers and defenders.
- Cross-Site Scripting (XSS) Exploitation and Prevention
Understand XSS vulnerabilities, learn various exploitation techniques, and apply robust prevention strategies to secure web applications effectively.
- CSRF Attacks: How to Bypass & Defend Against Forgery
You will learn to identify, exploit, and prevent Cross-Site Request Forgery vulnerabilities, including advanced bypass and defense strategies.
- Prevent SQL & NoSQL Injection and Data Exfiltration
Understand and prevent SQL and NoSQL injection vulnerabilities, learn data exfiltration techniques, and build more resilient web applications.
- Securing React and Angular Applications Against Frontend Attacks
Master securing React and Angular applications by understanding frontend attack surfaces, preventing XSS and CSRF, and implementing robust design patterns.
- Chaining Vulnerabilities for Deeper Exploits
Learn how attackers combine multiple vulnerabilities to achieve deeper system compromise and defend against such sophisticated attack chains.
- Building Intentionally Vulnerable Demo Projects
Learn how to build intentionally vulnerable web application demo projects to gain deeper insight into security flaws and prevention techniques.
- The Attacker's Mindset & Threat Modeling Fundamentals
Learn to think like an attacker to identify and mitigate security risks in web applications.
- Introduction to the OWASP Top 10 (2021) & Why It Matters
Learn about the OWASP Top 10 security risks and why they matter for web developers.
- Injection Flaws: SQL, NoSQL, and Command Injection
Learn about SQL, NoSQL, and Command Injection flaws, how they work, and best practices to prevent them.
- Cross-Site Scripting (XSS): Stored, Reflected, DOM Prevention
Understand how Stored, Reflected, and DOM-based Cross-Site Scripting attacks work and implement robust prevention mechanisms in your web applications.
- Protect Against CSRF and SSRF Web Forgery Attacks
Readers will grasp CSRF and SSRF attack mechanics and implement practical defense strategies to secure web applications effectively.
- Client-Side Security for React Applications
Learn how to secure React applications against common client-side vulnerabilities and build robust, secure frontends.
- Implement Client-Side Security in Angular Applications
Learn to implement robust client-side security in Angular applications, applying best practices and built-in mechanisms to protect user data and application integrity.
- Securely Store Client Data: Cookies, Local Storage, and IndexedDB
Understand how to securely store client-side data using Cookies, Local Storage, and IndexedDB, preventing common vulnerabilities like XSS and CSRF.
- Build a Secure React E-commerce Frontend
You will build a secure React e-commerce frontend, applying web security principles to protect sensitive user data and defend against common client-side vulnerabilities.
- Hands-On Project: Securing an Existing Angular Dashboard
Learn how to secure an existing Angular dashboard by implementing robust authentication, XSS and CSRF protection, and secure API communication.
- Incident Response, Monitoring & Staying Up-to-Date
Learn how to handle security incidents, set up monitoring, and stay updated on emerging threats.
- Web App Security: OWASP Top 10, Threat Modeling & Secure Coding
Learn to build secure web applications by mastering OWASP Top 10 vulnerabilities, threat modeling, and modern framework-specific secure coding practices.
- Security Considerations in HTMX Applications
Learn about security considerations in HTMX applications, including XSS and CSRF protection.
- Enable HTTPS on Localhost with Custom SSL/TLS Certificates
Configure HTTPS on your local development environment using custom SSL certificates to enable modern web features and APIs.