← All categories

Browser Security

Core browser security model: Same-Origin Policy, CORS, XSS, CSP, CSRF, clickjacking, SRI, HTTPS/HSTS, cookie attributes, storage security, Trusted Types, and supply-chain attacks.

Browser Security

Same-Origin Policy

What is XSS?

What is CSRF?

HTTPS and HSTS

Cookie Security Attributes

Clickjacking & X-Frame-Options

Browser Storage Security

Subresource Integrity (SRI)

CORS Preflight Requests

Content Security Policy (CSP)

SameSite Cookie Values

DOM-Based XSS

Trusted Types API

postMessage Security

iframe sandbox Attribute

Supply-Chain XSS

CSP Bypass Techniques

Prototype Pollution

CORS Misconfiguration Attacks

CSP Nonce Implementation

Mixed Content, SRI, and CSP Interaction