Web Security · Intermediate

Build safer web applications.

Learn the defensive foundations of web security: trusted input, identity, permissions and secure session design.

Course lessons

LESSON 01

Threat modelling basics

Identify assets, trust boundaries and likely risks before writing code.

Review
LESSON 02

Input validation

Validate on the server, use parameterised queries and encode output safely.

Review
LESSON 03

Authentication and sessions

Use strong password handling, MFA and safe session lifetimes.

Review
LESSON 04

Access control

Check permission on every server-side action, not just in the interface.

Review
Knowledge check

Where should permission checks be enforced?