Web applications face constant threats, from malicious actors to hacking attempts. This course focuses on preventing SQL Injection, Cross-Site Scripting (XSS), and Cross-Site Request Forgery (CSRF) attacks in your Node.js applications, using the OWASP Top 10 as a guide for security practices.

Syllabus

Introduction: Defending Node Applications from SQL Injection, XSS, & CSRF Attacks: Begin learning the skills to defend your Node applications.

Informational: Introduction: Defending Node Applications from SQL Injection, XSS, & CSRF Attacks

Preventing Cross-Site Request Forgery (CSRF) Attacks: Learn what CSRF attacks are and the primary techniques to mitigate them.

Article: Cross-Site Request Forgery (CSRF) Attacks
Quiz: Preventing Cross-Site Request Forgery (CSRF) Attacks

Preventing SQL Injection Attacks: Learn how to spot and prevent SQL injection attacks.

Article: SQL Injection
Lesson: Preventing SQL Injection Attacks
Quiz: Preventing SQL Injections
Project: Codey's Confectionery: Preventing SQL Injection Attacks

Preventing Cross-Site Scripting (XSS) Attacks: Learn how Cross-Site Scripting attacks work and how to prevent them.

Article: Cross-Site Scripting (XSS) Attacks
Article: What is CORS?
Lesson: Preventing Cross-Site Scripting (XSS) Attacks
Quiz: Cross-Site Scripting (XSS) Attack Prevention
Project: Restreview: Preventing Cross Site Scripting (XSS) Attacks

Defensive Coding in JavaScript: Learn and practice some techniques for keeping code secure.

Lesson: Defensive Coding in JavaScript
Quiz: Defensive Coding in JavaScript
Project: Trey Coding: Defensive Coding in JavaScript

Remediation & Incident Response: Learn the basics of Remediation and Incident Response.

Article: Remediation and Incident Response
Quiz: Remediation and Incident Response

Defending Node Applications Project: Defend a Node application from SQL Injection, Cross-Site Scripting (XSS), & Cross-Site Request Forgery (CSRF) attacks.