Stay Practiced.
Local toolsSite guideSettings
Curriculum

Application Security

Repair access, rendering, query and business-rule boundaries in a fictional application, with evidence that attacks fail and legitimate work still succeeds.

4 units · Web, Plus, Pro · 20 programming subjects + 2 security tracks

Branches show this unit’s authored theory, coding and assessment work.

Select a node. Drag the background to pan.100%

Unit 1 / 4

Identity and authority

Authorize the particular object and operation, using trusted identity.

Before you start: Read JavaScript functions and object updates. For the rendering and data units, know DOM text versus HTML and SQL SELECT / WHERE. The first theory lesson checks identity and ownership before code execution.

Open the first lab

The course, in order

Open a unit in the map to inspect its activities. Reading, guided completion, independent work and review remain distinct evidence.

  1. Identity and authority

    Authorize the particular object and operation, using trusted identity.

    Open this unit
  2. Writable data and rendering

    Constrain writes and keep stored text separate from executable markup.

    Open this unit
  3. Queries and business invariants

    Separate SQL structure from values, scope aggregates, and derive prices from trusted data.

    Open this unit
  4. Replay, failures and transfer

    Preserve idempotency and safe errors, then repair a revision workflow independently.

    Open this unit
TheoryHands-on codingEvidence / reviewTechnical wikiMembership access