RedSec
28 lessons

Client-side security

Browser trust, JavaScript review, XSS, CORS, CSP, and frontend storage.

  1. 001 DOM XSS source and sink review Learn DOM XSS source and sink review through a safe, repeatable client-side security workflow. intro tutorial 20 min
  2. 002 Content Security Policy basics Learn Content Security Policy basics through a safe, repeatable client-side security workflow. intro tutorial 20 min
  3. 003 CORS configuration review Learn CORS configuration review through a safe, repeatable client-side security workflow. intro tutorial 20 min
  4. 004 postMessage validation Learn postMessage validation through a safe, repeatable client-side security workflow. intro tutorial 20 min
  5. 005 Browser storage decisions Learn Browser storage decisions through a safe, repeatable client-side security workflow. intro tutorial 20 min
  6. 006 Client-side route guards Learn Client-side route guards through a safe, repeatable client-side security workflow. intro tutorial 20 min
  7. 007 CSRF prevention patterns Learn CSRF prevention patterns through a safe, repeatable client-side security workflow. intro reference 12 min
  8. 008 Clickjacking defenses Learn Clickjacking defenses through a safe, repeatable client-side security workflow. intro tutorial 20 min
  9. 009 JavaScript bundle review Learn JavaScript bundle review through a safe, repeatable client-side security workflow. core lab 30 min
  10. 010 Dependency risk in frontend apps Learn Dependency risk in frontend apps through a safe, repeatable client-side security workflow. core tutorial 20 min
  11. 011 Reflected XSS workflow Learn Reflected XSS workflow through a safe, repeatable client-side security workflow. core tutorial 20 min
  12. 012 Stored XSS workflow Learn Stored XSS workflow through a safe, repeatable client-side security workflow. core tutorial 20 min
  13. 013 DOM XSS source inventory Learn DOM XSS source inventory through a safe, repeatable client-side security workflow. core tutorial 20 min
  14. 014 DOM clobbering concepts Learn DOM clobbering concepts through a safe, repeatable client-side security workflow. core reference 12 min
  15. 015 Mutation XSS concepts Learn Mutation XSS concepts through a safe, repeatable client-side security workflow. core tutorial 20 min
  16. 016 CSP nonce and hash review Learn CSP nonce and hash review through a safe, repeatable client-side security workflow. core tutorial 20 min
  17. 017 CSP bypass thinking in labs Learn CSP bypass thinking in labs through a safe, repeatable client-side security workflow. core tutorial 20 min
  18. 018 CORS wildcard pitfalls Learn CORS wildcard pitfalls through a safe, repeatable client-side security workflow. core lab 30 min
  19. 019 CORS credentialed requests Learn CORS credentialed requests through a safe, repeatable client-side security workflow. core tutorial 20 min
  20. 020 postMessage origin checks Learn postMessage origin checks through a safe, repeatable client-side security workflow. core tutorial 20 min
  21. 021 postMessage schema validation Learn postMessage schema validation through a safe, repeatable client-side security workflow. core reference 12 min
  22. 022 Service worker security review Learn Service worker security review through a safe, repeatable client-side security workflow. core tutorial 20 min
  23. 023 IndexedDB sensitive data review Learn IndexedDB sensitive data review through a safe, repeatable client-side security workflow. core tutorial 20 min
  24. 024 Local storage token risks Learn Local storage token risks through a safe, repeatable client-side security workflow. core tutorial 20 min
  25. 025 Client side prototype pollution Learn Client side prototype pollution through a safe, repeatable client-side security workflow. core tutorial 20 min
  26. 026 Frontend source map review Learn Frontend source map review through a safe, repeatable client-side security workflow. advanced tutorial 35 min
  27. 027 NPM dependency triage Learn NPM dependency triage through a safe, repeatable client-side security workflow. advanced lab 45 min
  28. 028 Subresource integrity basics Learn Subresource integrity basics through a safe, repeatable client-side security workflow. advanced reference 12 min