sec
Security
Web security, auth and crypto, appsec and secure coding
5 topics 5 sections Node 24 intermediate
All beginner intermediate advanced
show All Unread Read
01 · Web security
5 topics API security Protect API request boundaries by authenticating callers, constraining inputs and resource use, and authorizing every object, action, and response field. intermediate 14 min CORS How browsers use CORS to share cross-origin responses, including origins, preflights, credentials, caching, and security boundaries. intermediate 16 min Security response headers Security response headers turn browser behavior into reviewable policy across CSP, HSTS, MIME handling, embedding, permissions, and deployment. intermediate 17 min Server-side request forgery How untrusted destinations turn server-side fetches into SSRF, and how to bind validation, redirects, and egress to one policy. intermediate 16 min Web security fundamentals Understand browser-server trust boundaries and stop common web vulnerabilities with encoding, parameterization, authorization, and CSRF defenses. intermediate 17 min