Security for web developers using Javascript, HTML, and CSS

As a web developer, you may not want to spend time making your web app secure, but it definitely comes with the territory. This practical guide provides you with the latest information on how to thwart security threats at several levels, including new areas such as microservices. You’ll learn how to...

Descripción completa

Detalles Bibliográficos
Otros Autores: Mueller, John Paul, author (author)
Formato: Libro electrónico
Idioma:Inglés
Publicado: Beijing, [China] : O'Reilly 2016.
Edición:First edition
Materias:
Ver en Biblioteca Universitat Ramon Llull:https://discovery.url.edu/permalink/34CSUC_URL/1im36ta/alma991009629980006719
Tabla de Contenidos:
  • Copyright; Table of Contents; Preface; About This Book; What You Need to Know; Development Environment Considerations; Icons Used in This Book; Conventions Used in This Book; Where to Get More Information; Using Code Examples; Safari® Books Online; How to Contact Us; Acknowledgments; Part I. Developing a Security Plan; Chapter 1. Defining the Application Environment; Specifying Web Application Threats; Understanding Software Security Assurance (SSA); Considering the OSSAP; Defining SSA Requirements; Categorizing Data and Resources; Performing the Required Analysis
  • Delving into Language-Specific IssuesDefining the Key HTML Issues; Defining the Key CSS Issues; Defining the Key JavaScript Issues; Considering Endpoint Defense Essentials; Preventing Security Breaches; Detecting Security Breaches; Remediating Broken Software; Dealing with Cloud Storage; Using External Code and Resources; Defining the Use of Libraries; Defining the Use of APIs; Defining the Use of Microservices; Accessing External Data; Allowing Access by Others; Chapter 2. Embracing User Needs and Expectations; Developing a User View of the Application
  • Considering Bring Your Own Device (BYOD) IssuesUnderstanding Web-Based Application Security; Considering Native App Issues; Using Custom Browsers; Verifying Code Compatibility Issues; Handling Nearly Continuous Device Updates; Devising Password Alternatives; Working with Passphrases; Using Biometric Solutions; Relying on Key Cards; Relying on USB Keys; Implementing a Token Strategy; Focusing on User Expectations; Making the Application Easy to Use; Making the Application Fast; Creating a Reliable Environment; Keeping Security in Perspective; Chapter 3. Getting Third-Party Assistance
  • Discovering Third-Party Security SolutionsConsidering Cloud Security Solutions; Understanding Data Repositories; Dealing with File Sharing Issues; Considering Cloud Storage; Choosing Between Product Types; Working with Libraries; Accessing APIs; Considering Microservices; Part II. Applying Successful Coding Practices; Chapter 4. Developing Successful Interfaces; Assessing the User Interface; Creating a Clear Interface; Making Interfaces Flexible; Providing User Aids; Defining the Accessibility Issues; Providing Controlled Choices; Choosing a User Interface Solution Level
  • Implementing Standard HTML ControlsWorking with CSS Controls; Creating Controls Using JavaScript; Validating the Input; Allowing Specific Input Only; Looking for Sneaky Inputs; Requesting New Input; Using Both Client-Side and Server-Side Validation; Expecting the Unexpected; Chapter 5. Building Reliable Code; Differentiating Reliability and Security; Defining the Roles of Reliability and Security; Avoiding Security Holes in Reliable Code; Focusing on Application Functionality; Developing Team Protocols; Creating a Lessons Learned Feedback Loop; Considering Issues of Packaged Solutions
  • Dealing with External Libraries