Angular Security
Remote or In-house | German & English
Remote or In-house | German & English
Martina Kraus has been active in the world of web development since her early years and has become an expert in the field of web security over the years. As an Application Security Engineer, she focuses on integrating security best practices into all phases of software development. In her role as a Google Developer Expert (GDE), she also loves to spread knowledge about web security at national and international conferences, regularly organizes ngGirls events (free Angular workshops for women) and the German Angular conference NG-DE.
Duration | 2 Days |
---|---|
Level | Intermediate |
Location | Remote or Inhouse |
Language | German & English |
Dieser Kurs behandelt die Grundlagen der Websicherheit, einschließlich Einführung, Same-Origin-Policy und Cross-Site-Resource-Sharing, Konfiguration von Browsersicherheitsmechanismen, Umgang mit bösartigem JavaScript, Einführung in Cross-Site-Scripting (XSS), XSS-Abwehr in Angular, Verwendung von Trusted Types, Einsatz der Content Security Policy (CSP), sichere Frontend-Architekturen, Sandboxing nicht vertrauenswürdiger Inhalte, architektonische Sicherheitsmuster, Sicherung von Tokens im Browser, erweiterte OAuth 2.0/2.1 Sicherheit, Sicherheitsbegrenzungen von OAuth 2.x in Frontends, Einführung in das Prüfen auf Schwachstellen und Nutzung manueller sowie automatischer Werkzeuge zur Sicherheitsanalyse.