Web Security

New domain

XSS, CSRF, CSP, CORS, OWASP Top 10 — the security layer senior engineers are expected to own.

7Topics

2Paths

1Free

beginnerintermediateadvanced

Filter

Attack Vectors

4 topics · ~2h total

intermediate

+new

Defenses & Policies

3 topics · ~1h total

advanced

Pro+new

Content Security Policy (CSP)

CORS Deep Dive

Secrets Management & Dependency Security

25 minAvailable

→

Loading compiler resources...

Web Security

Attack Vectors

XSS (stored, reflected, DOM)

CSRF

Clickjacking, Injection & SSRF

OWASP Top 10

Defenses & Policies

Content Security Policy (CSP)

CORS Deep Dive

Secrets Management & Dependency Security

Web Security

Attack Vectors

XSS (stored, reflected, DOM)

CSRF

Clickjacking, Injection & SSRF

OWASP Top 10

Defenses & Policies

Content Security Policy (CSP)

CORS Deep Dive

Secrets Management & Dependency Security