Client-side and server-side JavaScript each introduce security decisions. Developers follow attack and remediation examples involving injection, cross-site scripting, directory traversal, certificate validation, cryptographic choices, XML processing, deserialization, and dependencies. The course connects these issues to JavaScript implementation practices that can inform code review and maintenance.

Participants of this course will learn about the following vulnerabilities in JavaScript…

• HTTP Header Injection
• OS Injection
• SQL Injection
• Insufficient Certificate Validation
• Use of Insecure Ciphers
• Use of Insecure Digests
• XML External Entities
• Directory Traversal
• Cross-Site Scripting
• Insecure Deserialization
• Using Components with Known Vulnerabilities