Intermediate Security
OWASP Top 10
Critical security risks: XSS, injection, CSRF, and more.
Top 10 Web Vulnerabilities
The OWASP Top 10 is the industry-standard list of the most critical web application security risks.
2021 Top 10
- Broken Access Control: Users accessing unauthorized resources
- Cryptographic Failures: Weak encryption, exposed secrets
- Injection: SQL, NoSQL, OS command injection
- Insecure Design: Missing security in architecture
- Security Misconfiguration: Default configs, verbose errors
- Vulnerable Components: Outdated dependencies
- Auth Failures: Broken session management
- Data Integrity: Untrusted serialization, CI/CD
- Logging Failures: Missing audit trails
- SSRF: Server-side request forgery
XSS Prevention
// Bad - vulnerable
element.innerHTML = userInput;
// Good - escaped
element.textContent = userInput;SQL Injection Prevention
// Bad - vulnerable
query = "SELECT * FROM users WHERE id = " + userId;
// Good - parameterized
query = "SELECT * FROM users WHERE id = $1";
db.query(query, [userId]);