JavaScript Security

Liang, Y.E.

ISBN 10: 1783988002 / ISBN 13: 9781783988006

Published by Packt Publishing 2014-11, 2014

About this Item

Seller Inventory # 6666-IUK-9781783988006

Bibliographic Details

• Title: JavaScript Security
• Publisher: Packt Publishing 2014-11
• Publication Date: 2014
• Language: English
• ISBN 10: 1783988002
• ISBN 13: 9781783988006
• Binding: PF
• Condition: New

About this title

Synopsis

Learn JavaScript security to make your web applications more secure

About This Book

• Understand the JavaScript security issues that are a result of both the frontend and the backend of a web app
• Learn to implement Security techniques to avoid cross site forgery and various JavaScript vulnerabilities.
• Secure your JavaScript environment from the ground up, with step-by-step instructions covering all major ways to tackle Security issues

Who This Book Is For

This book is for JavaScript developers having basic web development knowledge and also for those who want to explore the security issues that arise from the use of JavaScript. Prior knowledge of how JavaScript is used, such as for DOM manipulation or to perform Ajax operations, is assumed.

What You Will Learn

• Review the features of JavaScript and its vulnerabilities
• Use JavaScript in tandem with Ajax RESTful APIs
• Deal with cross-site scripting
• Make basic GET and POST calls to an endpoint
• Explore what cross-site forgery is and how to deal with it
• Avoid misplaced trust in the client and explore various examples
• Understand JavaScript phishing

In Detail

This book starts off with an introduction to JavaScript security and gives you an overview of the basic functions JavaScript can perform on the Web, both on the client side and the server side. It demonstrates a couple of ways in which RESTful APIs can be laden with security flaws. You will also create a simple RESTful server using Express.js and Node.js. You will then focus on one of the most common JavaScript security attacks, cross-site scripting, and how to prevent cross-site scripting and cross-site forgery.

Last but not least, the book covers JavaScript phishing, how it works, and ways to counter it.

By the end of this book, you will be able to identify various risks of JavaScript and how to prevent them.

About the Author

Y.E Liang

Y.E Liang is a researcher, author, web developer, and business developer. He has experience in both frontend and backend development, particularly in engineering, user experience using JavaScript/CSS/HTML, and performing social network analysis. He has authored multiple books and research papers.