Web development
Web security
Injection, broken access control, XSS and the other usual ways web apps get broken into.
About 12 hours of study.
Where to learn it
Read
Watch
CS50's Web Programming with Python and JavaScript
Brian Yu, David J. Malan
Lecture 8, Scalability and security
Practise
Web Security Academy
PortSwigger
The apprentice-level labs for each topic
Free labs where you exploit real vulnerabilities in a safe sandbox.
Section not checked yet
Wrong chapter, dead link, or know something better? Tell us on GitHub.
Which roles ask for it
- Backend engineer in the first year
- Frontend engineer in the first year
- Full-stack engineer in the first year
- QA engineer / SDET good to have
- Penetration tester to get hired
- Security engineer to get hired
- Security analyst (SOC) to get hired