Content Security Policy Courses and Certifications

JSConf

You Use Content Security Policy, Don't You?

Learn how Content Security Policy can protect your website from XSS and other attacks. Discover its workings, implementation, and real-world examples through live coding demonstrations.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Association for Computing Machinery (ACM)

CSPAutoGen - Black-box Enforcement of Content Security Policy upon Real-world Websites

Explore black-box enforcement of Content Security Policy on websites, covering deployment, training, rewriting, and evaluation of CSPAutoGen for enhanced web security.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Association for Computing Machinery (ACM)

CSP is Dead, Long Live CSP! - On the Insecurity of Whitelists and the Future of the Content Security Policy

Explore the evolution and challenges of Content Security Policy, analyzing its effectiveness, vulnerabilities, and future directions in web security.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Association for Computing Machinery (ACM)

Evaluating the Effectiveness of Content Security Policy in the Wild

Evaluación de la efectividad de la Política de Seguridad de Contenido en la práctica, analizando su adopción, configuración y debilidades frente a ataques XSS.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

PHP UK Conference

Content Security Policy to the Rescue

Learn to implement Content Security Policy to mitigate XSS vulnerabilities, prevent clickjacking, and enhance web application security through live demos and real-world examples.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

OWASP Top 10: Protecting Against Threats and Vulnerabilities

1075 ratings at Udemy

Master OWASP Web Application Security: Defend the Digital Realm, Advanced Security Strategies, Techniques, & Prevention.

• Udemy
• 1 hour 32 minutes
• On-Demand
• Paid Course

Web Security: Common Vulnerabilities And Their Mitigation

622 ratings at Udemy

A guide to dealing with XSS, session hijacking, XSRF, credential management, SQLi and a whole lot more

• Udemy
• 8 hours 2 minutes
• On-Demand
• Paid Course

Packt

Web Hacking Expert - Full-Stack Exploitation Mastery

Master full-stack web exploitation techniques, from bypassing CSP to exploiting AngularJS vulnerabilities. Gain hands-on experience with real-world attack vectors, including race conditions, HTTP parameter pollution, and subdomain takeovers.

• Coursera
• 7 hours 51 minutes
• On-Demand
• Paid Course

LASCON

Fixing XSS with Content Security Policy

Explore Content Security Policy (CSP) as a defense against XSS attacks, comparing CSP 1.0 and 2.0, and learn implementation strategies for enhanced web application security.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

OWASP Top 10: #7 XSS and #8 Insecure Deserialization

77 ratings at LinkedIn Learning

Prepare for the seventh and eighth most common vulnerabilities on the 2021 OWASP Top 10 List: identity and authentication failures, and software and data integrity failures.

• LinkedIn Learning
• 40 minutes
• On-Demand
• Free Trial Available

CryptoCat

Damn Vulnerable Web Application (DVWA) - Complete Security Testing Walkthrough

Master web application security through hands-on DVWA challenges covering SQL injection, XSS, CSRF, file uploads, and more vulnerabilities at low, medium, and high difficulty levels.

• YouTube
• 8 hours 9 minutes
• On-Demand
• Free Video

Black Hat

Game of Chromes - Owning the Web with Zombie Chrome Extensions

Explore how malicious Chrome extensions can create botnets, distribute themselves, and exploit vulnerabilities. Learn about attack patterns, extension capabilities, and security measures.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Black Hat

Bypassing Browser Security Policies for Fun and Profit

Explore mobile browser vulnerabilities and security policy bypasses, including Same Origin Policy and Content Security Policy. Learn testing methodologies and see real-world examples of Android browser exploits.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

GOTO Conferences

HTTP Headers for the Responsible Developer

Explore HTTP headers for building inclusive, secure, and performant websites. Learn about encryption, request upgrades, content security policies, and data optimization techniques.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

ByteGrad

Next.js Top 7 Security Best Practices - Checklist

Discover essential Next.js security practices including dependency management, data validation, PII protection, environment variables, CSP, and rate limiting to safeguard your applications.

• YouTube
• 22 minutes
• On-Demand
• Free Video