Security in Node.js with Express and Angular

Course Curriculum

Chapter 1: Introduction

Lecture 1: Introduction

Lecture 2: Application Security & Risk

Lecture 3: The Role of Application Developers in Security

Lecture 4: The Vulnerable & Attacker Sample Applications

Lecture 5: Running & Exploring the Vulnerable Application

Chapter 2: Protecting Data from Extraction

Lecture 1: Introduction

Lecture 2: Attack Reconnaissance

Lecture 3: Attack Execution

Lecture 4: Cross-site Scripting

Lecture 5: Attack Prevention

Lecture 6: Prevention with Input Handling

Lecture 7: Input Handling Examples

Lecture 8: Prevention with a Content Security Policy

Lecture 9: Correcting in-line Styles

Lecture 10: Correcting in-line Scripts

Lecture 11: Content Security Policy Example

Lecture 12: Content Security Policy Browser Support

Lecture 13: Defense with Input Handling in Angular

Lecture 14: Defense with Input Handling in Node.js

Lecture 15: Defense with a Content Security Policy

Lecture 16: Content Security Policy in Action

Chapter 3: Hide Network Traffic from Snooping

Lecture 1: Introduction

Lecture 2: Attack Reconnaissance & Execution

Lecture 3: Man in the Middle

Lecture 4: Client/Server Overview

Lecture 5: Attacker Positioning

Lecture 6: Prevention with Transport Layer Security

Lecture 7: Transport Layer Security

Lecture 8: Generating a Self-signed Certificate

Lecture 9: Implementing HTTPS with a Certificate

Lecture 10: Defense with Transport Layer Security in Place

Chapter 4: Ensure Legitimacy of Requests

Lecture 1: Introduction

Lecture 2: Attack Reconnaissance

Lecture 3: Attack Setup

Lecture 4: Attack Execution

Lecture 5: Cross-site Request Forgery

Lecture 6: Attack Prevention

Lecture 7: Importance of Cross-site Scripting Mitigation

Lecture 8: Prevention with HTTP Header Checks

Lecture 9: Origin and Referer Header Example

Lecture 10: Prevention with the Synchronizer Token Pattern

Lecture 11: Synchronizer Token Pattern Example

Lecture 12: Implementation of HTTP Origin and Referer Header Checks

Lecture 13: Defense with HTTP Origin and Referer Header Checks

Lecture 14: Defense with the Synchronizer Token Pattern

Chapter 5: Block Content Hijacking

Lecture 1: Introduction

Lecture 2: Attack Reconnaissance & Setup

Lecture 3: Attack Execution

Lecture 4: Clickjacking

Lecture 5: Attack Prevention

Lecture 6: Prevention with HTTP Headers

Lecture 7: Browser Support

Lecture 8: Prevention Through Denying Framing

Lecture 9: Prevention Through Limiting Framing from the Same Origin

Lecture 10: Prevention Through Limiting Framing to Specific Origins