Securing web applications¶

Web applications combine authentication, authorisation, session management, database access, and file handling into a single interface. Each of those components has recognisable failure modes, and most real-world vulnerabilities are variations on a small set of patterns. The pages here address those patterns at the code level: what produces the vulnerability, and what prevents it.