Security

Content:

• XSS

• CORS

• SQL injections

• Auth (JWT, OAuth, Basic, etc.)

• CSP

• CSRF

• OWASP Top 10

• Man-in-the-Middle (MITM) Attacks

Materials:

• OWASP Top 10

• CORS

• Same origin policy and CORS

• Auth Types

• Security Headers:

  • https://www.netsparker.com/blog/web-security/http-security-headers/

  • https://habr.com/en/post/499342/

• Security scanning

• SSL scanning

• https://web.stanford.edu/class/cs253/