Web development
Web security
Injection, broken access control, XSS and the other usual ways web apps get broken into.
About 12 hours of study.
Where to learn it
Read
Watch
CS50's Web Programming with Python and JavaScript
Brian Yu, David J. Malan
Lecture 8, Scalability and security
Section not checked yet
Practise
Web Security Academy
PortSwigger
The apprentice-level labs for each topic
Free labs where you exploit real vulnerabilities in a safe sandbox.
Section not checked yet
Which roles ask for it
- Backend engineer in the first year
- Frontend engineer in the first year
- Full-stack engineer in the first year
- QA engineer / SDET good to have
- Security analyst (SOC) to get hired