Этот материал находится в платной подписке. Оформи премиум подписку и смотри или слушай Web Security Dev Academy - 12-week online program, а также все другие курсы, прямо сейчас!
Премиум
  • Урок 1. 00:01:34
    Welcome lesson
  • Урок 2. 00:03:06
    Program structure and topics
  • Урок 3. 00:02:11
    Training outcomes
  • Урок 4. 00:02:03
    What you need
  • Урок 5. 00:01:13
    Your first task
  • Урок 6. 00:00:39
    Welcome lesson
  • Урок 7. 00:06:29
    Same-origin policy
  • Урок 8. 00:02:37
    Cross-origin resource sharing
  • Урок 9. 00:07:34
    Same-origin policy [LABS]
  • Урок 10. 00:03:11
    Cross-origin resource sharing [LABS]
  • Урок 11. 00:07:11
    Content Security Policy
  • Урок 12. 00:22:54
    Content Security Policy [LABS]
  • Урок 13. 00:02:45
    Content Security Policy - Reporting [LABS]
  • Урок 14. 00:03:16
    Subresource Integrity [LABS]
  • Урок 15. 00:00:59
    Homework
  • Урок 16. 00:00:33
    Welcome lesson
  • Урок 17. 00:09:23
    Client-side security boundaries
  • Урок 18. 00:09:13
    Server-side security
  • Урок 19. 00:06:02
    HTTPS
  • Урок 20. 00:17:21
    Sessions vs. Tokens
  • Урок 21. 00:05:52
    When to use Sessions vs. JWT Tokens
  • Урок 22. 00:02:08
    Homework
  • Урок 23. 00:01:01
    Welcome lesson
  • Урок 24. 00:20:22
    OWASP Top 10
  • Урок 25. 00:11:17
    Cross-site scripting
  • Урок 26. 00:15:49
    Cross-site scripting [LABS]
  • Урок 27. 00:10:15
    Cross-site request forgery
  • Урок 28. 00:18:44
    Cross-site request forgery [LABS]
  • Урок 29. 00:14:33
    JWT Hacking
  • Урок 30. 00:01:51
    Other security vulnerabilities
  • Урок 31. 00:00:19
    Welcome lesson
  • Урок 32. 00:10:59
    Application overview
  • Урок 33. 00:03:04
    Application presentation
  • Урок 34. 00:10:09
    Application architecture
  • Урок 35. 00:07:23
    Authentication vs. authorization
  • Урок 36. 00:07:55
    Secured Angular part
  • Урок 37. 00:10:19
    Secured API
  • Урок 38. 00:03:37
    Node.js application setup
  • Урок 39. 00:01:48
    Homework
  • Урок 40. 00:01:00
    Welcome lesson
  • Урок 41. 00:13:54
    Features overview
  • Урок 42. 00:14:00
    Login feature [Angular]
  • Урок 43. 00:19:47
    Login feature [Node]
  • Урок 44. 00:05:23
    Sign up feature [Angular]
  • Урок 45. 00:15:01
    Sign up feature [Node]
  • Урок 46. 00:05:42
    Router Guards
  • Урок 47. 00:08:09
    Http Interceptors
  • Урок 48. 00:01:16
    Homework
  • Урок 49. 00:00:33
    Welcome lesson
  • Урок 50. 00:11:01
    XSS prevention
  • Урок 51. 00:12:39
    CSRF prevention
  • Урок 52. 00:02:06
    HttpOnly and Secure Cookies
  • Урок 53. 00:06:27
    UserAuth object
  • Урок 54. 00:08:55
    Conditional components visibility
  • Урок 55. 00:01:00
    Homework
  • Урок 56. 00:00:59
    Welcome lesson
  • Урок 57. 00:04:45
    UserAuth object
  • Урок 58. 00:03:11
    Server-side session
  • Урок 59. 00:23:25
    Logging access and application events
  • Урок 60. 00:13:29
    Throttling failed logins
  • Урок 61. 00:12:25
    Input sanitization and validation
  • Урок 62. 00:07:08
    Preventing calls without the proper role
  • Урок 63. 00:03:23
    Preventing calls without the ownership
  • Урок 64. 00:02:42
    Setting up CORS
  • Урок 65. 00:01:35
    Homework
  • Урок 66. 00:01:06
    Welcome lesson
  • Урок 67. 00:16:13
    Adding a new user to account [Angular]
  • Урок 68. 00:13:06
    Adding a new user to account [Node]
  • Урок 69. 00:05:00
    Confirming a new user for account [Angular]
  • Урок 70. 00:01:41
    Confirming a new user for account [Node]
  • Урок 71. 00:11:49
    Password recovery
  • Урок 72. 00:13:40
    Managing active sessions
  • Урок 73. 00:02:06
    Welcome lesson
  • Урок 74. 00:09:59
    Introduction to OAuth 2.0
  • Урок 75. 00:18:51
    Different client types and suitable OAuth flows
  • Урок 76. 00:09:43
    Security measures in OAuth
  • Урок 77. 00:08:52
    PKCE
  • Урок 78. 00:11:48
    OpenID Connect
  • Урок 79. 00:03:40
    Id Token with Implicit flow
  • Урок 80. 00:09:54
    Id Token with Implicit flow [CODE]
  • Урок 81. 00:25:33
    Authorization Code flow [CODE]
  • Урок 82. 00:03:38
    OAuth/OIDC Homework
  • Урок 83. 00:12:07
    Multi-factor authentication introduction
  • Урок 84. 00:02:51
    Two-factor authentication demo
  • Урок 85. 00:09:46
    Requesting OTP [Angular]
  • Урок 86. 00:08:36
    Validating OTP [Node]
  • Урок 87. 00:05:19
    2FA settings [Angular]
  • Урок 88. 00:04:14
    2FA settings [Node]
  • Урок 89. 00:18:23
    External user management introduction
  • Урок 90. 00:01:59
    Budget and Auth0 integration presentation
  • Урок 91. 00:03:08
    Auth0 integration [Angular]
  • Урок 92. 00:13:59
    Auth0 integration [Node]
  • Урок 93. 00:00:54
    Homework
  • Урок 94. 00:01:19
    Intro
  • Урок 95. 00:05:10
    Getting started
  • Урок 96. 00:03:20
    Basic match
  • Урок 97. 00:02:17
    Basic allow
  • Урок 98. 00:03:33
    Basic conditions
  • Урок 99. 00:05:31
    Common examples
  • Урок 100. 00:04:30
    Functions
  • Урок 101. 00:03:58
    Read other documents
  • Урок 102. 00:04:49
    Chat example
  • Урок 103. 00:05:44
    Role-based auth example
  • Урок 104. 00:02:49
    Security testing introduction
  • Урок 105. 00:04:01
    Setting up mock Firestore
  • Урок 106. 00:03:59
    Unit testing with mock data
  • Урок 107. 00:02:05
    Debugging security rules
  • Урок 108. 00:03:05
    Welcome lesson
  • Урок 109. 00:21:21
    Personal data introduction
  • Урок 110. 00:21:38
    Privacy Policy
  • Урок 111. 00:02:52
    Terms and Conditions
  • Урок 112. 00:13:55
    GDPR and regulations in the World
  • Урок 113. 00:15:10
    Cookies
  • Урок 114. 00:05:43
    Summary
  • Урок 115. 00:02:53
    Introduction
  • Урок 116. 00:02:02
    Same-origin Policy
  • Урок 117. 00:03:35
    User authentication
  • Урок 118. 00:01:40
    Origin spoofing
  • Урок 119. 00:03:22
    Input validation
  • Урок 120. 00:04:19
    TCP tunneling
  • Урок 121. 00:02:10
    Denial of Service (DoS)
  • Урок 122. 00:00:59
    WSS Encryption
  • Урок 123. 00:05:03
    Simple WebSocket demo [LABS]
  • Урок 124. 00:02:25
    Content Security Policy [LABS]
  • Урок 125. 00:08:55
    Authentication [LABS]
  • Урок 126. 00:02:23
    Cross-site WebSocket hijacking [LABS]
  • Урок 127. 00:01:41
    Goodbye and kind request
  • Урок 128. 00:36:24
    LIVE: Module 3 @ 20/06/2024
  • Урок 129. 01:07:11
    Secure Serverless Devlopment @ Marek Sottl