Security Traps in Single Page Applications like
- Cross-Site Scripting (XSS)
- Cross-Site Request Forgery (CSRF)
- ...
Here you find some demos & playgrounds
- Javascript Playground: Some basic xss demos being protected by DOMPurify and Trusted Types
- Angular Playground showing some security stuff like output encoding and sanitizing (automatic & manually)
- React Playground showing similar security stuff like output encoding and manually sanitizing
- Banking Server: Demo to show CSRF attack in action (real customer client, attacker client & rest api server)