Этот материал находится в платной подписке. Оформи премиум подписку и смотри или слушай Web Security Dev Academy - 12-week online program, а также все другие курсы, прямо сейчас!
Премиум
  1. Урок 1. 00:01:34
    Welcome lesson
  2. Урок 2. 00:03:06
    Program structure and topics
  3. Урок 3. 00:02:11
    Training outcomes
  4. Урок 4. 00:02:03
    What you need
  5. Урок 5. 00:01:13
    Your first task
  6. Урок 6. 00:00:39
    Welcome lesson
  7. Урок 7. 00:06:29
    Same-origin policy
  8. Урок 8. 00:02:37
    Cross-origin resource sharing
  9. Урок 9. 00:07:34
    Same-origin policy [LABS]
  10. Урок 10. 00:03:11
    Cross-origin resource sharing [LABS]
  11. Урок 11. 00:07:11
    Content Security Policy
  12. Урок 12. 00:22:54
    Content Security Policy [LABS]
  13. Урок 13. 00:02:45
    Content Security Policy - Reporting [LABS]
  14. Урок 14. 00:03:16
    Subresource Integrity [LABS]
  15. Урок 15. 00:00:59
    Homework
  16. Урок 16. 00:00:33
    Welcome lesson
  17. Урок 17. 00:09:23
    Client-side security boundaries
  18. Урок 18. 00:09:13
    Server-side security
  19. Урок 19. 00:06:02
    HTTPS
  20. Урок 20. 00:17:21
    Sessions vs. Tokens
  21. Урок 21. 00:05:52
    When to use Sessions vs. JWT Tokens
  22. Урок 22. 00:02:08
    Homework
  23. Урок 23. 00:01:01
    Welcome lesson
  24. Урок 24. 00:20:22
    OWASP Top 10
  25. Урок 25. 00:11:17
    Cross-site scripting
  26. Урок 26. 00:15:49
    Cross-site scripting [LABS]
  27. Урок 27. 00:10:15
    Cross-site request forgery
  28. Урок 28. 00:18:44
    Cross-site request forgery [LABS]
  29. Урок 29. 00:14:33
    JWT Hacking
  30. Урок 30. 00:01:51
    Other security vulnerabilities
  31. Урок 31. 00:00:19
    Welcome lesson
  32. Урок 32. 00:10:59
    Application overview
  33. Урок 33. 00:03:04
    Application presentation
  34. Урок 34. 00:10:09
    Application architecture
  35. Урок 35. 00:07:23
    Authentication vs. authorization
  36. Урок 36. 00:07:55
    Secured Angular part
  37. Урок 37. 00:10:19
    Secured API
  38. Урок 38. 00:03:37
    Node.js application setup
  39. Урок 39. 00:01:48
    Homework
  40. Урок 40. 00:01:00
    Welcome lesson
  41. Урок 41. 00:13:54
    Features overview
  42. Урок 42. 00:14:00
    Login feature [Angular]
  43. Урок 43. 00:19:47
    Login feature [Node]
  44. Урок 44. 00:05:23
    Sign up feature [Angular]
  45. Урок 45. 00:15:01
    Sign up feature [Node]
  46. Урок 46. 00:05:42
    Router Guards
  47. Урок 47. 00:08:09
    Http Interceptors
  48. Урок 48. 00:01:16
    Homework
  49. Урок 49. 00:00:33
    Welcome lesson
  50. Урок 50. 00:11:01
    XSS prevention
  51. Урок 51. 00:12:39
    CSRF prevention
  52. Урок 52. 00:02:06
    HttpOnly and Secure Cookies
  53. Урок 53. 00:06:27
    UserAuth object
  54. Урок 54. 00:08:55
    Conditional components visibility
  55. Урок 55. 00:01:00
    Homework
  56. Урок 56. 00:00:59
    Welcome lesson
  57. Урок 57. 00:04:45
    UserAuth object
  58. Урок 58. 00:03:11
    Server-side session
  59. Урок 59. 00:23:25
    Logging access and application events
  60. Урок 60. 00:13:29
    Throttling failed logins
  61. Урок 61. 00:12:25
    Input sanitization and validation
  62. Урок 62. 00:07:08
    Preventing calls without the proper role
  63. Урок 63. 00:03:23
    Preventing calls without the ownership
  64. Урок 64. 00:02:42
    Setting up CORS
  65. Урок 65. 00:01:35
    Homework
  66. Урок 66. 00:01:06
    Welcome lesson
  67. Урок 67. 00:16:13
    Adding a new user to account [Angular]
  68. Урок 68. 00:13:06
    Adding a new user to account [Node]
  69. Урок 69. 00:05:00
    Confirming a new user for account [Angular]
  70. Урок 70. 00:01:41
    Confirming a new user for account [Node]
  71. Урок 71. 00:11:49
    Password recovery
  72. Урок 72. 00:13:40
    Managing active sessions
  73. Урок 73. 00:02:06
    Welcome lesson
  74. Урок 74. 00:09:59
    Introduction to OAuth 2.0
  75. Урок 75. 00:18:51
    Different client types and suitable OAuth flows
  76. Урок 76. 00:09:43
    Security measures in OAuth
  77. Урок 77. 00:08:52
    PKCE
  78. Урок 78. 00:11:48
    OpenID Connect
  79. Урок 79. 00:03:40
    Id Token with Implicit flow
  80. Урок 80. 00:09:54
    Id Token with Implicit flow [CODE]
  81. Урок 81. 00:25:33
    Authorization Code flow [CODE]
  82. Урок 82. 00:03:38
    OAuth/OIDC Homework
  83. Урок 83. 00:12:07
    Multi-factor authentication introduction
  84. Урок 84. 00:02:51
    Two-factor authentication demo
  85. Урок 85. 00:09:46
    Requesting OTP [Angular]
  86. Урок 86. 00:08:36
    Validating OTP [Node]
  87. Урок 87. 00:05:19
    2FA settings [Angular]
  88. Урок 88. 00:04:14
    2FA settings [Node]
  89. Урок 89. 00:18:23
    External user management introduction
  90. Урок 90. 00:01:59
    Budget and Auth0 integration presentation
  91. Урок 91. 00:03:08
    Auth0 integration [Angular]
  92. Урок 92. 00:13:59
    Auth0 integration [Node]
  93. Урок 93. 00:00:54
    Homework
  94. Урок 94. 00:01:19
    Intro
  95. Урок 95. 00:05:10
    Getting started
  96. Урок 96. 00:03:20
    Basic match
  97. Урок 97. 00:02:17
    Basic allow
  98. Урок 98. 00:03:33
    Basic conditions
  99. Урок 99. 00:05:31
    Common examples
  100. Урок 100. 00:04:30
    Functions
  101. Урок 101. 00:03:58
    Read other documents
  102. Урок 102. 00:04:49
    Chat example
  103. Урок 103. 00:05:44
    Role-based auth example
  104. Урок 104. 00:02:49
    Security testing introduction
  105. Урок 105. 00:04:01
    Setting up mock Firestore
  106. Урок 106. 00:03:59
    Unit testing with mock data
  107. Урок 107. 00:02:05
    Debugging security rules
  108. Урок 108. 00:03:05
    Welcome lesson
  109. Урок 109. 00:21:21
    Personal data introduction
  110. Урок 110. 00:21:38
    Privacy Policy
  111. Урок 111. 00:02:52
    Terms and Conditions
  112. Урок 112. 00:13:55
    GDPR and regulations in the World
  113. Урок 113. 00:15:10
    Cookies
  114. Урок 114. 00:05:43
    Summary
  115. Урок 115. 00:02:53
    Introduction
  116. Урок 116. 00:02:02
    Same-origin Policy
  117. Урок 117. 00:03:35
    User authentication
  118. Урок 118. 00:01:40
    Origin spoofing
  119. Урок 119. 00:03:22
    Input validation
  120. Урок 120. 00:04:19
    TCP tunneling
  121. Урок 121. 00:02:10
    Denial of Service (DoS)
  122. Урок 122. 00:00:59
    WSS Encryption
  123. Урок 123. 00:05:03
    Simple WebSocket demo [LABS]
  124. Урок 124. 00:02:25
    Content Security Policy [LABS]
  125. Урок 125. 00:08:55
    Authentication [LABS]
  126. Урок 126. 00:02:23
    Cross-site WebSocket hijacking [LABS]
  127. Урок 127. 00:01:41
    Goodbye and kind request
  128. Урок 128. 00:36:24
    LIVE: Module 3 @ 20/06/2024
  129. Урок 129. 01:07:11
    Secure Serverless Devlopment @ Marek Sottl