Developers, designers, engineers, and creators can no longer afford to pass responsibility for identity and data security onto others. Web developers who don’t understand how to obscure data in transmission, for instance, can open security flaws on a site without realizing it. With this practical guide, you’ll learn how and why everyone working on a system needs to ensure that users and data are protected. Authors Jonathan LeBlanc and Tim Messerschmidt provide a deep dive into the concepts, technology, and programming methodologies necessary to build a secure interface for data and identity―without compromising usability. You’ll learn how to plug holes in existing systems, protect against viable attack vectors, and work in environments that sometimes are naturally insecure.
Covers a wide range of web application security topics. The book serves as an introduction, and on the plus side, provide several links that provide more detailed information if you are interested in exploring further.
I believe the concepts could have been explained with real-world examples. There are many free resources out there that do a better job at it.
This book is decent. The good thing about it is that it uses NodeJS/Javascript to explain the code examples, so it's easy for most developers to understand and follow along. Plus, there's a GitHub repository available for tinkering with the examples. The downside is that the book only gives a brief overview of each topic, without going into much detail. It would be better if the authors provided more in-depth materials and examples.