Index/Reliability and security in the browser

Get Premium
CourseFrontend System Design · 0715 minPremium

Reliability and security in the browser

Running code on devices you do not control: error boundaries and graceful degradation, client monitoring with source maps, feature flags and staged rollouts for front ends, and the browser's threat model: XSS, CSP, CSRF, where auth tokens should live, third-party scripts and why the client is never trusted.

Premium

Part of the Frontend System Design course, on the Premium plan

Readers with Lifetime Access read it in full. Already bought it? Sign in from the top bar.

What’s inside

  • 1. Fail in pieces
  • 2. Knowing it broke: client monitoring
  • 3. Shipping safely: flags and rollouts
  • 4. XSS: the browser's main threat
  • 5. Identity in the browser: tokens, cookies, CSRF and CORS
  • 6. Third-party code and the supply chain
  • 7. The client is never trusted
  • In the interview
  • What goes wrong
  • Drills
  • Check yourself