Security in modern Web Applications - OWASP to the rescue
summary
Covers OWASP Top 10 as the baseline and shows a concrete tool: a next-security module for Next.js that injects security headers, CORS, CSRF protection, an XSS validator and a rate limiter (5 requests per 10s). Demo adds Content Security Policy and Permissions-Policy headers to responses, blocks an injected script, and returns 429 after exceeding the rate, and every feature is configurable per route so defaults can be relaxed or tightened.
AI-written summary · about
chapters (7)
- 0:00Web app security intro
- 1:45OWASP Top 10 foundation
- 3:28Modern app security risks
- 6:39Securing Next.js apps
- 8:05Next Security demo
- 10:14Next Security config
- 12:00Closing & resources
