|
所在平台: Coursera |
课程主页: https://www.coursera.org/learn/javascript-security-part-1
课程评论：没有评论
课程名称：JavaScript安全性第一部分 课程概述：本课程涵盖了跨站脚本攻击（XSS）、JavaScript远程代码执行、跨站请求伪造（CSRF）以及浏览器安全性。 课程大纲： 1. **XSS与JavaScript远程代码执行** - 描述：本部分探讨JavaScript中的跨站脚本攻击（XSS）。XSS攻击被认为是JavaScript web应用程序面临的主要威胁。在本课程中，我们将详细讨论XSS，包括反射型XSS、存储型XSS和基于DOM的XSS，并全面覆盖内容安全策略（CSP）和可信类型。 2. **CSRF和浏览器安全性** - 描述：本部分探讨跨站请求伪造（CSRF）。CSRF攻击可能对网站造成灾难性的后果。在本课程中，我们将准确了解CSRF的性质，并从后端（使用Node.js的示例）和前端的角度探讨防御措施。此外，课程还将介绍浏览器阻止某些攻击的多种安全机制，任何Web开发人员都应该了解这些机制及其使用方法。 本课程旨在帮助学员深入理解JavaScript安全漏洞及其防护方式，提高Web应用的安全性。
Name:XSS and Javascript Remote Code Execution
Description:This course explores cross-site scripting (XSS) in JavaScript. XSS attacks are arguably the main threat against JavaScript web applications. In this course, we will cover them in detail and leave no stone unturned as we check everything about reflected, stored, DOM-based XSS. We will extensively cover CSP and trusted types.
Name:CSRF and Browser Security
Description:An exploration of cross-site request forgery, or CSRF. CSRF (cross-site request forgery) attacks can be disastrous for a website. In this course, we will learn exactly what they are and take a back-end (examples with Node.js) and front-end approach against them. Browsers have multiple security mechanisms to block certain attacks, and any web developer should have an idea of what these mechanisms are and how to use them.
This course covers XSS and Javascript Remote Code Execution and CSRF and Browser Security.
