Skip to the notes
JSGroundwork
JSGroundwork handwritten · web dev
✎Playground→⌘Problems↻Review🔥Progress

Chapters

24 chapters
⌕
Beginner7›
B1The security mindsetB2Injection attacksB3XSSB4Auth basicsB5Transport securityB6Sensitive data exposureB7Security headers
Intermediate9›
I1CSRFI2Access controlI3Session managementI4OAuth & OIDCI5API securityI6Supply-chain securityI7CORS in depthI8MisconfigurationI9Secrets management
Advanced8›
A1OWASP Top 10A2Prototype pollutionA3SSRFA4Security testing toolsA5CryptographyA6Zero trustA7Incident responseA8Compliance basics
/ search[ ] chaptert top

Web Security levels

1Beginner2Intermediate3Advanced

Ready to read

JSJavaScript⑂Git◎Interview prepΣDSA in JSSDSystem Design
More topics15›
</>HTML{ }CSS⚛ReactNNext.jsNeNest.jsTSTypeScriptNoNode.js🐳DockerDBSQL & Databases✓Testing🔒Web Security☁Cloud & DevOps◈GraphQL◆Redis☸Kubernetes
100%
A2

Prototype pollution & deserialization attacks

not written yet

This section will cover:

  • How untrusted data becomes code execution
←previousOWASP Top 10↑ CovernextSSRF→