📄️ Overview
Security in frontend system design means building the application in a way that protects user data, prevents unauthorized actions, and keeps communication with backend services safe.
📄️ Cross-Site Scripting XSS
Cross-Site Scripting, also called XSS, happens when an attacker injects malicious JavaScript into a website and makes the browser execute it.
📄️ iFrame Protection
An iframe is used to embed another web page inside your own web page.
📄️ Security Headers
Security headers are HTTP response headers that tell the browser how to handle security-sensitive behavior.
📄️ Client Side Security
Client-side security means protecting the data, tokens, sessions, and browser storage used by a frontend application.
📄️ Secure Communication
Secure communication means the data exchanged between the client and the server is protected while it moves over the network.
📄️ Dependency Security
Dependency security means keeping the third-party packages used in a project safe, updated, monitored, and locked properly.
📄️ Compliance and Regulation
Compliance and regulation means following required rules, standards, and security guidelines for handling user data, application security, privacy, accessibility, and industry-specific
📄️ Input Validation and Sanitization
Input validation and sanitization are used to make sure user-provided data is safe, expected, and controlled before the application uses it.
📄️ Server-Side Request Forgery SSRF
Server-Side Request Forgery, also called SSRF, is a web security vulnerability where an attacker tricks the server into making a request to an unintended location.
📄️ Server-Side JavaScript Injection SSJI
Server-Side JavaScript Injection, also called SSJI, is a security vulnerability where user-provided input gets executed as JavaScript code on the server.
📄️ Permission Policy
Permission Policy, earlier called Feature Policy, is a browser security mechanism used to control which powerful browser features can be used by a webpage or by embedded third-party content
📄️ Subresource Integrity SRI
Subresource Integrity, also called SRI, is a browser security feature used to verify that external resources are loaded exactly as expected.
📄️ Cross-Origin Resource Sharing CORS
Cross-Origin Resource Sharing, also called CORS, is a browser security mechanism that controls whether one origin can access resources from another origin.
📄️ Cross-Site Request Forgery CSRF
Cross-Site Request Forgery, also called CSRF, is an attack where a user is tricked into performing an unwanted action on a website where they are already logged in.