EARLY ACCESSWEB SECURITY FOUNDATIONS PATHLIFETIME ACCESS
— THE LIBRARY — COURSE
Introduction to Browser Security Headers
Self-paced video training — 5 modules, 46 lessons. Work through it at your own pace — every lesson is real practitioner training, not slide-reading.
5
MODULES
46
LESSONS
1080p
STREAMING
1st
LESSON FREE
▶FREE PREVIEW · INTRODUCTIONFREE · NO ACCOUNT NEEDEDWATCH NOW →
CURRICULUM
5 modules, in order.
01Understanding browser security headers8 LESSONS
▶IntroductionFREE
▶Security threats in a web world
▶Things the server can't control
▶Understanding headers
▶How browsers handle response headers
▶Non-standard and browser prefixed headers
▶Current utilization of browser security headers
▶Summary
02HTTP Strict Transport Security (HSTS)8 LESSONS
▶Introduction
▶Understanding the problem that HSTS solves
▶Understanding HSTS
▶The max-age Directive
▶The includeSubdomains keyword
▶The preload keyword
▶Browser compatibility
▶Summary
03HTTP Public Key Pinning (HPKP)10 LESSONS
▶Introduction
▶Summary
▶Understanding the problem that HPKP Solves
▶Understanding HPKP
▶The pin-sha256 Directive
▶The max-age Directive
▶The report-uri Directive
▶The includeSubdomains Keyword
▶Reporting only
▶Browser compatibility
04Content Security Policy (CSP)12 LESSONS
▶Introduction
▶Reporting only
▶Browser compatibility
▶Summary
▶Understanding the problem that CSP solves
▶Understanding CSP
▶Declaring content sources
▶Content source policy directives
▶The unsafe inline and Unsafe eval keywords
▶Using hashes and nonces to whitelist unsafe inline content
▶The frame-ancestors
▶The report-uri Directive
05Tools for working with browser headers8 LESSONS
▶Introduction
▶SecurityHeaders io
▶Report URI for Analyzing a CSP
▶Creating a policy with Report URI's CSP Builder
▶The CSP Fiddler Extension
▶NWebsec for ASP NET
▶Logging CSP Violations with Report URI
▶Summary
CURATED BY
CyberCoreSchool
PRACTITIONER-CURATED LIBRARY
Selected from working practitioners' training libraries and kept whole — modules, labs and walkthroughs exactly as taught.
GOOD TO KNOW
Lessons stream in the browser and remember where you stopped.
Watch on two devices at once — phone, tablet or desktop.
Download buttons are disabled; delivery uses expiring encrypted links.
$149 · ONE PAYMENT
Start with the free lesson.
The first lesson is open to everyone. Buy the course when you are sure — after that it is yours for life.