JavaScript: Security Essentials

Introduction

• Build effective and secure JavaScript applications
• What you should know

1. Overview of Security Concepts

• Overview of the most common threats
• List of available resources
• Overview of this course's approach

2. Security Applied: XSS

• What is cross-site scripting (XSS)?
• Example of XSS in code
• Final syntax applied XSS
• Best practices for XSS threats

3. Security Applied: CSRF

• What is cross-site request forgery (CSRF)?
• Overview of JSON Web Token (JWT)
• Overview of Auth0
• Best practices for CSRF threats

4. Security Applied: Sensitive Data

• What are sensitive data risks?
• Overview of the encryption
• List of the crypto libraries
• Best practices for sensitive data

5. Security Applied: SSJI

• What is server-side JavaScript injection (SSJI)?
• Example of SSJI code
• How to prevent SSJI

6. Security Applied: Obfuscation

• What is obfuscation?
• Tools for scrambling your data
• Best practices for scrambling data

Conclusion

• Next steps