Request methods, CSRF, escaping & headers Course
26 minutes
Course description
This course focuses on supporting request and response security. First, we’ll discuss how Laravel supports semantic request verbs while still being compatible with browsers. Then, tools to protect against cross-site request forgery and cross-site scripting protection are examined. Finally, the best practices for applying specific security-related headers to responses are reviewed.Syllabus
Security headers
Video - 00:03:00
How to globally send security headers with Laravel, if need be.
Displaying and escaping user data
Video - 00:09:00
Leveraging Laravel's built-in functionality in blade to escape user data.
Cross-site request forgery mitigation
Video - 00:06:00
How to stop CSRF and how to disable the built-in protection.
Proper request methods
Video - 00:08:00
Using proper request methods for data retrieval versus modification.
Unlock 7 days of free training
- 1,400+ hands-on courses and labs
- Certification practice exams
- Skill assessments
Plans & pricing
Infosec Skills Personal
$299 / year
- 190+ role-guided learning paths (e.g., Ethical Hacking, Threat Hunting)
- 100s of hands-on labs in cloud-hosted cyber ranges
- Custom certification practice exams (e.g., CISSP, Security+)
- Skill assessments
- Infosec peer community support
Infosec Skills Teams
$799 per license / year
- Team administration and reporting
- Dedicated client success manager
-
Single sign-on (SSO)
Easily authenticate and manage your learners by connecting to any identity provider that supports the SAML 2.0 standard.
-
Integrations via API
Retrieve training performance and engagement metrics and integrate learner data into your existing LMS or HRS.
- 190+ role-guided learning paths and assessments (e.g., Incident Response)
- 100s of hands-on labs in cloud-hosted cyber ranges
- Create and assign custom learning paths
- Custom certification practice exams (e.g., CISSP, CISA)
- Optional upgrade: Guarantee team certification with live boot camps