JavaScript Security Vulnerabilities Tutorial – With Code Examples

Learn about 10 security vulnerabilities every JavaScript developer should know. First try to find the vulnerabilities in the different code examples. Then learn how to fix the issues.

✏️ Brandon from Semgrep developed this course.

🏗 Semgrep provided a grant to make this course possible.

🎉 Thanks to our Champion and Sponsor supporters:
👾 davthecoder
👾 jedi-or-sith
👾 南宮千影
👾 Agustín Kussrow
👾 Nattira Maneerat
👾 Heather Wcislo
👾 Serhiy Kalinets
👾 Justin Hual
👾 Otis Morgan

--

[takanome-dev]

Turns out that I did not figure out any of these vulnerabilities which means that I have been shipping vulnerable code all this time 😬Thanks for the awesome tuts. Time to debug prod 😅

[random_guy]

Just the tutorial I was looking for learning code review.
As a security researcher and CTF player, this is a very Vital skill one should master. Or at least try to learn basic
Thanks a lot ❤️

[developerGRohit]

I really enjoyed your coding style, the clarity in presenting scenarios, and your explanations. I look forward to watching more of your videos. Additionally, I believe it's crucial to stay informed about security topics, especially given their significance in today's landscape.

[jayseb]

Thanks for including proper error management in the second example. I so often see during my tests apps sending global 200's or 500's - not really taking the time to correctly management them -> thus poor having logging information. Many teams should watch this video. Cheers.

[dreamofyesterday]

Awesome video as always. Would love to see more videos about cyber security/ethical hacking/pentesting!!

[saltymiche]

Very nice + quick intro to secure code review!

[kooldandy]

Good one.
Would like to see more on this.

[TheJohndward]

Thank you so much, this is incredible!

[gk_eth]

Looking forward for more videos like this.. it's lit💥

[keilerguardo]

That was an incredible tutorial, thank you very much for share with us.

[efezlfn]

Amazing course. Thank you much for publishing it. Very usefull.

[ceciljoel]

Giving examples is a good idea you should give more of them in your courses

[chenmoasis]

Thank you for this amazing video! Very informative.

[jpsfyjr]

Does this guy have a course online? What a teacher

[alexbird]

Great idea, would be really cool to increase font size and install more contrast theme just for the video, because I can't see comments from my phone and barely can read other code. But nevertheless, thanks!

[paras.developer]

great video about security information

[captainalpha]

In 14:35, in this case won't we get an error before even entering the find method? because the request's body is in JSON format but the username is an object that can't be inserted into the request's body.

[i_am_dumb]

Please make a similar video for solidity . I would say it would help if fcc can upload the famous Secureum Bootcamp for Smart Contract Security it would be very beneficial 🙏

[hpyvetx]

understood nothing but loved it! Watched almost 9 minutes of this tut, will come back later after learning the basics of js. Still trying to make a tic-tac-toe game> Wish me luck!

[johnsansevere]

Please change the color of your comment. I can't read it on a black screen, but otherwise you have a fantastic video.