
The ideas the Web security 2 lab assumes: what a signed token is, how a database query is built from parts, why a server fetching a URL for you is different from you fetching it, and the theme under all of it — the server must not trust data just because it handled it. About ten minutes.

The ideas the Web security lab assumes: how a request and response work, what a URL’s parts are, what a cookie is, and the one that makes everything after it possible — the browser fills in the request, so the request is yours to change. About ten minutes.

Test your JavaScript knowledge. The language that powers the web — from variables to type coercion.