beginner
Authentication Basics
How to verify user identity and store credentials safely
Cross-Origin Resource Sharing (CORS)
How browsers control cross-origin requests and how to configure it safely
Cross-Site Request Forgery (CSRF)
How attackers trick browsers into unwanted actions and how to block it
Cross-Site Scripting (XSS)
How injected scripts run in the browser and how to stop them
HTTPS and TLS
Why encrypted connections matter and how to enforce them
OWASP Top Ten
An overview of the most critical web application security risks
SQL Injection
How unsafe queries expose your database and how to write safe ones
Web Security Fundamentals
Core principles every developer needs to build safer web applications