EARLY ACCESSWEB SECURITY FOUNDATIONS PATHLIFETIME ACCESS
Introduction to browser security headers
Self-paced video training — 5 modules, 92 lessons. Work through it at your own pace — every lesson is real practitioner training, not slide-reading.
5
MODULES
92
LESSONS
1080p
STREAMING
1st
LESSON FREE
▶FREE PREVIEW · INTRODUCTIONFREE · NO ACCOUNT NEEDEDWATCH NOW →
CURRICULUM
5 modules, in order.
01Understanding browser security headers16 LESSONS
▶IntroductionFREE
▶Security threats in a web world
▶Things the server can't control
▶Understanding headers
▶How browsers handle response headers
▶Non-standard and browser prefixed headers
▶Current utilization of browser security headers
▶Summary
▶Introduction
▶Security threats in a web world
▶Things the server can't control
▶Understanding headers
+ 4 more lessons
02HTTP Strict Transport Security (HSTS)16 LESSONS
▶Introduction
▶Understanding the problem that HSTS solves
▶Understanding HSTS
▶The max-age Directive
▶The includeSubdomains keyword
▶The preload keyword
▶Browser compatibility
▶Summary
▶Introduction
▶Understanding the problem that HSTS solves
▶Understanding HSTS
▶The max-age Directive
+ 4 more lessons
03HTTP Public Key Pinning (HPKP)20 LESSONS
▶Introduction
▶Summary
▶Understanding the problem that HPKP Solves
▶Understanding HPKP
▶The pin-sha256 Directive
▶The max-age Directive
▶The report-uri Directive
▶The includeSubdomains Keyword
▶Reporting only
▶Browser compatibility
▶Introduction
▶Summary
+ 8 more lessons
04Content Security Policy (CSP)24 LESSONS
▶Introduction
▶Reporting only
▶Browser compatibility
▶Summary
▶Understanding the problem that CSP solves
▶Understanding CSP
▶Declaring content sources
▶Content source policy directives
▶The unsafe inline and Unsafe eval keywords
▶Using hashes and nonces to whitelist unsafe inline content
▶The frame-ancestors
▶The report-uri Directive
+ 12 more lessons
05Tools for working with browser headers16 LESSONS
▶Introduction
▶SecurityHeaders io
▶Report URI for Analyzing a CSP
▶Creating a policy with Report URI's CSP Builder
▶The CSP Fiddler Extension
▶NWebsec for ASP NET
▶Logging CSP Violations with Report URI
▶Summary
▶Introduction
▶SecurityHeaders io
▶Report URI for Analyzing a CSP
▶Creating a policy with Report URI's CSP Builder
+ 4 more lessons
CURATED BY
SecuraLearn
PRACTITIONER-CURATED LIBRARY
Selected from working practitioners' training libraries and kept whole — modules, labs and walkthroughs exactly as taught.
GOOD TO KNOW
Lessons stream in the browser and remember where you stopped.
Watch on two devices at once — phone, tablet or desktop.
Download buttons are disabled; delivery uses expiring encrypted links.
$149 · ONE PAYMENT
Start with the free lesson.
The first lesson is open to everyone. Buy the course when you are sure — after that it is yours for life.