Learn about web application security needed by software engineers every day.

Web App Security

The applications that we create for the web today have to face up to more security risks than ever before. It is extremely important that software developers enforce security best practices, such as how to add protection through HTTP headers, to protect against the myriad vulnerabilities that web applications are subject to. 
In this module, we’ll start by learning how to prevent fraudulent SSL certificates from being served to clients. Then, we’ll move on to learning how to defend against XSS attacks and clickjacking. 
In the latter half of the module, we’ll learn security practices related to HTTP cookies. We’ll also learn some tips related to security tradeoffs that we frequently make in our day-to-day work. Towards the end of the module, we’ll learn how to ward off DDoS attacks, which is crucial when our application scales. 
This module will demystify web security and help us stay on top of important security-related concerns in our web applications.

Web Application Security for the Everyday Software Engineer

They download a document from a server and render it.

A Web browser and Google are the same thing.

Which of the following is true about browsers?

Which of the following is true about browsers?

Browsers always render graphically.

1. DNS resolution
2. HTTP exchange
3. Rendering

1. HTTP exchange
2. DNS resolution
3. Rendering

1. DNS resolution
2. Rendering
3. HTTP exchange

Which of the following describes browser function in the correct order?

Which of the following describes browser function in the correct order?

The process of resolving a hostname from a given IP.

The process of finding an IP address from a given hostname.

The process of resolving domain name from a given hostname.

Each browser has it's own set of vulnerabilities

Each browser has it’s own set of vulnerabilities

It's a good idea to support as many browsers as possible.

It’s a good idea to support as many browsers as possible.

A sort of “minimum requirements” for browsers

A sort of “minimum requirements” for all software development

Introduction

Understanding The Browser

HTTP

Protection through HTTP Headers

HTTP Cookies

Situationals

DDoS Attacks

Bug Bounty Programs

Conclusion

Quiz Yourself on Browsers