Security guide
Web Security Beyond Auth: How Attacks Work and How to Stop Them
A plain-English guide to web application security — the attacker mindset and trust boundaries, the same-origin policy and CORS, XSS, CSRF, SQL injection, HTTPS and TLS, security headers, and defence in depth. How real attacks work, and the fixes that actually hold. No hype.
8 lessons·≈ 1 hr read·Free, no account
- 01How Websites Get Hacked: The Attacker's Mindset, ExplainedBeginner·10 min
- 02The Same-Origin Policy & CORS, Explained: Why the Browser Blocks Your FetchBeginner·10 min
- 03XSS Explained: Cross-Site Scripting, and How to Actually Stop ItIntermediate·11 min
- 04CSRF Explained: How a Random Site Can Act as You — and How to Stop ItIntermediate·10 min
- 05SQL Injection Explained: The Bug That Still Empties DatabasesIntermediate·10 min
- 06HTTPS & TLS Explained: What the Padlock Actually GuaranteesIntermediate·11 min
- 07Security Headers Explained: Hardening a Site With Almost No CodeIntermediate·10 min
- 08Defence in Depth: The Security Mindset That Ties It All TogetherBeginner·10 min