This course explores the importance of input validation and its role in web application security. Using TypeScript and Express.js, we will analyze client-side and server-side validation, common bypass techniques, and secure coding practices. The course follows an **offense-defense approach**, where we first explore vulnerabilities before implementing security solutions.
Overview
Syllabus
- Unit 1: Understanding Input Validation and Its Importance
- Explore Express Application Setup
- Explore the Registration Component
- Demonstrate XSS Vulnerability
- Unit 2: Enhancing User Experience with HTML5 Client-Side Validation
- HTML5 Form Validation in Action
- Enhance Input Validation Logic
- Real-Time Validation in Editor
- Bypass HTML5 Validation in Register Form
- Unit 3: Understanding and Mitigating XSS: Client-Side Validation
- Implementing Input Sanitization with DOMPurify
- Sanitize Inputs with DOMPurify
- Configuring DOMPurify for Safe Attribute Allowance
- Preserve Text, Remove Harmful Tags
- Unit 4: Securing the Application Against Attacks
- Bypassing Client-Side Validation with cURL
- Testing Snippet Creation Endpoints
- Unit 5: Secure Server-Side Validation with TypeScript
- Integrate Zod Validation Middleware
- Validation Middleware Testing Script
- Secure Your Snippet Endpoints