Overview

With the demise of Flash and the rise of HTML5 a new era has been ushered in that features better-looking and better-functioning websites that are compatible with mobiles and PCs alike. Transferring data and receiving it has also become much more straightforward than before. 

HTML5 serves as the backbone of modern web applications and is used in 90% of websites and web applications, with all major browser vendors including Apple, Google, Firefox, Opera, Amazon, and Microsoft, supporting HTML5. With HTML5 serving as the structure of a web application, understanding HTML5 security is crucial to providing a first line of defense in web applications. While HTML5 is designed to be inherently more secure than HTML, it provides little protection for attacks such as XSS, CSRF, Tabnabbing, HTML smuggling, and SQL injection. 

HTML5 presents its unique challenges, and its associated applications can feature several vulnerabilities such as PostMessage vulnerabilities, Local Storage vulnerabilities, and Middleware vulnerabilities, which could invite XSS exploitation, as well as CORS security issues, WebSockets Vulnerabilities, Geolocation vulnerabilities, WebDatabase vulnerabilities, and other flaws. It’s crucial for developers and application security professionals to learn to write a secure HTML5 code and implement measures such as access control, secure storage mechanisms, sandboxing, API protection, authorization, and access filtering to develop a secure and hardened web application. 

The course will cover an overview of HTML5 Fundamentals, followed by a look at some of the common vulnerabilities found in HTML5. As you move along, you’ll learn about some of the potential HTML5 attack vectors, as well as the built-in security features that already exist in HTML5. The course will include some of the defensive programming techniques that can be implemented to secure HTML5 code as well as how to deal with security issues in HTML5 Forms. 

By the end of the course, you’ll have a thorough understanding of all the security threats targeting HTML5 and you’ll be able to implement measures needed secure HTML5 from malicious attacks.