Same-Origin Policy Courses and Certifications

ASP.NET Core: Security

Explore techniques for building secure ASP.NET Core applications and protecting against common attacks.

• LinkedIn Learning
• 1-2 hours
• On-Demand
• Free Trial Available

Web Security: Same-Origin Policies

Same-origin policies play an important role in web security, to protect data. In this course, learn how to develop secure, interactive sites.

• LinkedIn Learning
• 1-2 hours
• On-Demand
• Free Trial Available

Association for Computing Machinery (ACM)

The "Web/Local" Boundary Is Fuzzy - A Security Study of Chrome's Process-based Sandboxing

Explore Chrome's process-based sandboxing security with this ACM study, featuring less than an hour of material on web/local boundaries, attacks, and browser memory safety.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Client-Side Protection Against DOM-Based XSS Done Right

Learn to protect against DOM-Based XSS with experts from OWASP Foundation. Topics include XSS vulnerability, types, prevention, and performance. Less than 1-hour workload.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

OWASP Foundation

CSP Pitfalls and Gotchas

Learn about AppSec, CSP pitfalls, and building perfect frameworks in less than an hour with OWASP Foundation.

• YouTube
• 15 minutes
• On-Demand
• Conference Talk

Black Hat

The Deputies Are Still Confused

Explore the complexities of the same-origin policy, its caveats, and practical examples of attacks with Black Hat's concise program. Learn to mitigate CSRF, clickjacking, and NTLM attacks.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

Black Hat

Your Scripts In My Page - What Could Possibly Go Wrong?

Explore web security with Black Hat in under an hour. Learn about the Same-origin Policy, cross-domain script inclusion attacks, and defensive measures. Includes a browser extension demo.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Black Hat

Session Identifier are for Now, Passwords are Forever - XSS-Based Abuse of Browser Password Managers

Learn about XSS-based attack patterns on browser-provided password managers with Black Hat. Understand the vulnerabilities of major browsers and get recommendations for protection.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

Black Hat

Bypassing Browser Security Policies for Fun and Profit

Explore browser security policies, their bypasses, and vulnerabilities in this under 1-hour program by Black Hat. Learn testing methodologies, exploit demonstrations, and patching strategies.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

Black Hat

Same Origin Method Execution - Exploiting a Callback for Same Origin Policy Bypass

Learn to exploit JSONP for unintended website actions with Black Hat's short program. Understand how vulnerabilities can affect entire domains and how to prevent such attacks.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Black Hat

Browsers Gone Wild

Explore browser weaknesses and stealthy attacks with Black Hat's practical presentation, featuring live demos and challenging your knowledge of the Same Origin Policy.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

Surfing the Sea and Drowning in Tabs - An Introduction to Cross Site Request Forgery

Learn about Cross Site Request Forgery, its mechanisms, and defense tactics in a 50-minute session from Circle City Con 2015.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk