Learning Paths / Learn Web Security

web-security
intermediate
6h estimated

Learn Web Security

Defend web apps against common attacks: XSS, CSRF, SQL injection, plus auth, HTTPS/TLS, CORS, and the OWASP Top Ten.

Start learning →

Foundations

  1. 1

    Fundamentals

    Core principles every developer needs to build safer web applications

  2. 2

    OWASP Top Ten

    An overview of the most critical web application security risks

Common Attacks

  1. 1

    Cross-Site Scripting (XSS)

    How injected scripts run in the browser and how to stop them

  2. 2

    Cross-Site Request Forgery (CSRF)

    How attackers trick browsers into unwanted actions and how to block it

  3. 3

    SQL Injection

    How unsafe queries expose your database and how to write safe ones

Defenses

  1. 1

    Authentication

    How to verify user identity and store credentials safely

  2. 2

    HTTPS & TLS

    Why encrypted connections matter and how to enforce them

  3. 3

    CORS

    How browsers control cross-origin requests and how to configure it safely