AI Workshop: learn to build apps with AI →
Web Security
Understand common web security vulnerabilities and how to prevent them.

Join the AI Workshop and learn to build real-world apps with AI. A hands-on, practical program to level up your skills.


Web security is one of the most critical aspects of modern web development. Understanding common vulnerabilities and how to prevent them is essential for any developer building applications that handle user data.

In this unit, we’ll explore the most common web security threats, including CSRF (Cross-Site Request Forgery), XSS (Cross-Site Scripting), and SQL Injection - all part of the OWASP Top 10 security risks. You’ll learn how these attacks work, why they’re dangerous, and most importantly, how to protect your applications against them.

We’ll also cover authentication topics like JWT (JSON Web Tokens) and secure password storage practices. By the end of this unit, you’ll have a solid foundation in web security that will help you build safer, more robust applications.

Lessons in this unit:

0: ▶︎ Introduction
1: CSRF (Cross Site Request Forgery) tutorial
2: Cross Site Scripting (XSS) tutorial
3: SQL injection
4: JSON Web Token (JWT) explained
5: How to store passwords in the database
6: Some inputs to check for XSS issues