Security for Web Developers: Using JavaScript, HTML, and CSS

by John Paul Mueller

As a web developer, you may not want to spend time making your web app secure, but it definitely comes with the territory. This practical guide provides you with the latest information on how to thwart security threats at several levels, including new areas such as microservices. You ll learn how to help protect your app no matter where it runs, from the latest smartphone to an older desktop, and everything in between.

Author John Paul Mueller delivers specific advice as well as several security programming examples for developers with a good knowledge of CSS3, HTML5, and JavaScript. In five separate sections, this book shows you how to protect against viruses, DDoS attacks, security breaches, and other nasty intrusions.Create a security plan for your organization that takes the latest devices and user needs into accountDevelop secure interfaces, and safely incorporate third-party code from libraries, APIs, and microservicesUse sandboxing techniques, in-house and third-party testing techniques, and learn to think like a hackerImplement a maintenance cycle by determining when and how to update your application softwareLearn techniques for efficiently tracking security threats as well as training requirements that your organization can use"

384 pages, Paperback

Published November 29, 2015

Reviews

[Vitaly · Rating 2 out of 5]

The book concerns too much in listing high level thoughts, about a real as it gets problem - security in web applications. Got a feeling the title is misleading as I don't see how developers would find this useful, if they would be in the market for a book listing all common known issues with practical examples. This book just touched on the topics in as general manner as possible, any more and it could be read by a 6 year old. You get more (of a practical approach) with various CS papers on the topic and web resources. Which also this book is actually good at, it highlights those resources. The book is informative, but that is it.

[Daniel Blazquez · Rating 2 out of 5]

Focuses on superficial and introductory security topics, from a front-end development point of view. I found the title to be a bit misleading and the book in general not at the level of other O'Reilly publications

[Ivo Stoykov · Rating 4 out of 5]

A good starting point for IT professionals. As this topic is one of the primary concerns nowadays everyone should keep an eye on it.