Web Application Security

This course is part of Microsoft Front-End Developer Professional Certificate

Instructor: Microsoft

2,062 already enrolled

Included with

4 modules

Gain insight into a topic and learn the fundamentals.

19 reviews

Beginner level

Recommended experience

4 weeks to complete

at 10 hours a week

Flexible schedule

Learn at your own pace

4 modules

Gain insight into a topic and learn the fundamentals.

19 reviews

Beginner level

Recommended experience

4 weeks to complete

at 10 hours a week

Flexible schedule

Learn at your own pace

Skills you'll gain

Category: Authentications
Category: Vulnerability Assessments
Category: Data Validation
Category: Data Security
Category: Microsoft Copilot
Category: Security Controls
Category: Application Security
Category: Data Integrity
Category: Secure Coding
Category: Encryption
Category: Authorization (Computing)

Tools you'll learn

Category: Open Web Application Security Project (OWASP)
Category: Web Applications

Details to know

Shareable certificate

Add to your LinkedIn profile

Assessments

32 assignments¹

AI Graded see disclaimer

Taught in English

Build your Mobile and Web Development expertise

This course is part of the Microsoft Front-End Developer Professional Certificate

When you enroll in this course, you'll also be enrolled in this Professional Certificate.

Learn new concepts from industry experts
Gain a foundational understanding of a subject or tool
Develop job-relevant skills with hands-on projects
Earn a shareable career certificate from Microsoft

There are 4 modules in this course

This course covers essential web security concepts and secure coding practices. You’ll learn to identify common vulnerabilities, implement protection techniques, and leverage Microsoft Copilot to detect and fix security issues in web applications.

By the end of this program, you will be able to… Define common web application vulnerabilities and principles of secure coding. Explain the concepts and impacts of SQL injection, XSS, CSRF, input validation techniques, and best practices for authentication and authorization. Describe the importance of output encoding, sanitization, secure data storage, and transmission. Enhance the security of web applications with Microsoft Copilot to detect vulnerabilities, fix issues, and implement secure coding practices.

In this module, you will explore the most prevalent security vulnerabilities in web applications and their potential impact. You’ll learn how attacks such as SQL Injection, Cross-Site Scripting (XSS), and Cross-Site Request Forgery (CSRF) exploit security flaws, compromising data integrity and user privacy. Through real-world examples, you’ll analyze how these threats manifest and the consequences they can have on web applications. By the end of this module, you’ll have a deeper understanding of these vulnerabilities and the critical need for secure coding practices to mitigate risks.

What's included

25 videos12 readings10 assignments1 ungraded lab1 plugin

25 videos Total 105 minutes

Course Introduction: Web Application Security 2 minutes
Instructor Introduction 2 minutes
The What’s What of the Course 3 minutes
Completing the Guided Labs 4 minutes
Introducing the AI Tool: Microsoft Copilot 3 minutes
How to Be Successful in This Program 5 minutes
Introduction to the Capstone Project 2 minutes
Introduction: Common Vulnerabilities 1 minute
Identifying Common Web Vulnerabilities 4 minutes
Practical Impact of Vulnerabilities 3 minutes
Comparing Vulnerabilities 4 minutes
How SQL Injection Works 4 minutes
Mitigating SQL Injection 3 minutes
Implementing SQL Injection Mitigation 7 minutes
How XSS Works 3 minutes
Mitigating XSS Vulnerabilities 4 minutes
XSS Exploitation and Mitigation in Action 9 minutes
How CSRF Works 7 minutes
Mitigating CSRF 5 minutes
Demonstrating CSRF Exploitation and Mitigation 6 minutes
SQL Injection Case Study 6 minutes
XXS Injection Case Study 6 minutes
CSRF Case Study 4 minutes
Analyzing and Mitigating Web Vulnerabilities 6 minutes
Conclusion: Common Vulnerabilities (e.g., SQL Injection, XSS, CSRF) 1 minute

12 readings Total 135 minutes

Course Syllabus: Web Application Security 5 minutes
Completing the Guided Labs 30 minutes
Microsoft Tools for Front-End Development 10 minutes
Activity: Vulnerability Comparison Table - Answer Key 10 minutes
Overview of Common Web Application Vulnerabilities 10 minutes
Overview of Common Web Vulnerabilities 10 minutes
Activity: SQL Injection Mitigation Practice - Answer Key 10 minutes
Mitigating SQL Injection: Practical Strategies 10 minutes
Activity: Preventing XSS in a Sample Application - Answer Key 10 minutes
Mitigating XSS: Input Validation and Encoding 10 minutes
Activity: Implementing CSRF Prevention in a Web Application - Answer Key 10 minutes
You Try It! Analyzing and Mitigating Web Vulnerabilities - Answer Key 10 minutes

10 assignments Total 310 minutes

Activity: Vulnerability Comparison Table 30 minutes
Practice Quiz: Introduction to Web Application Vulnerabilities 25 minutes
Activity: SQL Injection Mitigation Practice 30 minutes
Practice Quiz: SQL Injection 30 minutes
Activity: Preventing XSS in a Sample Application 30 minutes
Practice Quiz: Cross-Site Scripting (XSS) 30 minutes
Activity: Implementing CSRF Prevention in a Web Application 30 minutes
Practice Quiz: Cross-Site Request Forgery (CSRF) 30 minutes
Practice Quiz: Mitigating Web Vulnerabilities 25 minutes
Graded Quiz: Common Vulnerabilities (e.g., SQL Injection, XSS, CSRF) 50 minutes

1 ungraded lab Total 60 minutes

You Try It! Analyzing and Mitigating Web Vulnerabilities 60 minutes

1 plugin Total 15 minutes

Guided Lab: Analyzing and Mitigating Web Vulnerabilities 15 minutes

In this module, you will learn the fundamental principles of secure coding and how they help protect web applications from common security threats. You'll explore techniques for input validation, output encoding, and data sanitization to prevent malicious attacks. Additionally, you’ll gain insight into best practices for authentication, authorization, and secure data storage and transmission. By the end of this module, you’ll understand how to implement security-focused development practices that strengthen application defenses and safeguard user data.

What's included

18 videos9 readings6 assignments4 ungraded labs4 plugins

18 videos Total 79 minutes

Introduction: Secure Coding Practices and Input Validation 1 minute
Overview of Secure Coding Principles 5 minutes
Secure Development Lifecycle (SDL) 3 minutes
Types of Input Validation 3 minutes
Implementing Input Validation in Code 8 minutes
Implementing Input Validation in a Web Application - Guided Lab Video 4 minutes
Encoding Techniques 4 minutes
Implementing Encoding Techniques in Code 6 minutes
Sanitization Practices 3 minutes
Encoding and Sanitization in a Web Application - Guided Lab Video 5 minutes
Authentication Techniques 4 minutes
Authentication Techniques Passkeys 4 minutes
Authorization Techniques – Implementing Role-Based Access Control (RBAC) 5 minutes
Implementing Authentication and Authorization in a Web Application - Guided Lab Video 9 minutes
Encryption Techniques for Secure Data Storage 3 minutes
Secure Transmission With TLS/SSL Protocols 5 minutes
Secure Data Storage and Transmission in a Web Application - Guided Lab Video 5 minutes
Conclusion: Secure Coding Practices and Input Validation 1 minute

9 readings Total 90 minutes

Foundations of Secure Coding: Key Principles and the SDL 10 minutes
You Try It! Implementing Input Validation in a Web Application - Answer Key 10 minutes
Practical Input Validation Techniques for Secure Web Applications 10 minutes
You Try It! Encoding and Sanitization in a Web Application - Answer Key 10 minutes
Encoding and Sanitization Cheat Sheet 10 minutes
You Try It! Implementing Authentication and Authorization in a Web Application - Answer Key 10 minutes
Authentication and Authorization Best Practices 10 minutes
You Try It! Secure Data Storage and Transmission in a Web Application - Answer Key 10 minutes
Encryption and Secure Transmission Reference Guide 10 minutes

6 assignments Total 170 minutes

Practice Quiz: Principles of Secure Coding 15 minutes
Practice Quiz: Implementing Input Validation 25 minutes
Practice Quiz: Encoding and Sanitization Techniques 30 minutes
Practice Quiz: Implementing Secure Authentication and Authorization 25 minutes
Practice Quiz: Secure Data Storage and Transmission Techniques 25 minutes
Graded Quiz: Secure Coding Practices and Input Validation 50 minutes

4 ungraded labs Total 240 minutes

You Try It! Implementing Input Validation in a Web Application 60 minutes
You Try It! Encoding and Sanitization in a Web Application 60 minutes
You Try It! Implementing Authentication and Authorization in a Web Application 60 minutes
You Try It! Secure Data Storage and Transmission in a Web Application 60 minutes

4 plugins Total 60 minutes

Guided Lab: Implementing Input Validation in a Web Application 15 minutes
Guided Lab: Encoding and Sanitization in a Web Application 15 minutes
Guided Lab: Implementing Authentication and Authorization in a Web Application 15 minutes
Guided Lab: Secure Data Storage and Transmission in a Web Application 15 minutes

In this module, you will discover how Microsoft Copilot can assist in detecting and mitigating security vulnerabilities in web applications. You’ll learn how to leverage Copilot’s AI-powered capabilities to identify security flaws in code, apply fixes, and reinforce secure coding best practices. Additionally, you’ll explore how Copilot can be integrated into a comprehensive security review process to enhance application security. By the end of this module, you’ll be equipped to use Microsoft Copilot as a valuable tool in securing web applications against potential threats.

What's included

10 videos10 readings11 assignments4 ungraded labs

10 videos Total 40 minutes

Overview of Security Vulnerability Detection 3 minutes
Using Copilot to Detect Vulnerabilities 5 minutes
Understanding Copilot’s Recommendations 3 minutes
Applying Fixes With Copilot 7 minutes
Secure Coding Recommendations from Copilot 4 minutes
Overview of Comprehensive Security Reviews 4 minutes
Performing a Security Review With Copilot 5 minutes
Understanding the Limits of AI Security Recommendations 3 minutes
Comparing AI Recommendations With Manual Reviews 5 minutes
Conclusion: Using Microsoft Copilot for Identifying and Fixing Security Issues 2 minutes

10 readings Total 90 minutes

Activity: Detecting Vulnerabilities Using Microsoft Copilot - Answer Key 10 minutes
You Try It! Detecting Vulnerabilities Using Microsoft Copilot - Answer Key 10 minutes
Activity: Fixing Vulnerabilities Using Microsoft Copilot - Answer Key 10 minutes
You Try It! Fixing Vulnerabilities Using Microsoft Copilot - Answer Key 10 minutes
Activity: Implementing Secure Coding Practices Using Copilot - Answer Key 10 minutes
You Try It! Implementing Secure Coding Practices Using Copilot - Answer Key 10 minutes
Secure Coding Practices With Copilot 10 minutes
Activity: Conducting a Comprehensive Security Review Using Copilot - Answer Key 5 minutes
You Try It! Conducting a Comprehensive Security Review Using Copilot - Answer Key 10 minutes
Activity: Create a Security Evaluation Report - Answer Key 5 minutes

11 assignments Total 295 minutes

Activity: Detecting Vulnerabilities Using Microsoft Copilot 30 minutes
Practice Quiz: Identifying Security Vulnerabilities With Microsoft Copilot 20 minutes
Activity: Fixing Vulnerabilities Using Microsoft Copilot 30 minutes
Practice Quiz: Fixing Security Issues Using Microsoft Copilot 25 minutes
Activity: Implementing Secure Coding Practices Using Copilot 30 minutes
Practice Quiz: Applying Secure Coding Practices Using Copilot 15 minutes
Activity: Conducting a Comprehensive Security Review Using Copilot 30 minutes
Practice Quiz: Comprehensive Security Review With Microsoft Copilot 20 minutes
Activity: Create a Security Evaluation Report 30 minutes
Practice Quiz: Evaluating AI-Driven Security Practices 15 minutes
Graded Quiz: Using Microsoft Copilot for Identifying and Fixing Security Issues 50 minutes

4 ungraded labs Total 240 minutes

You Try It! Detecting Vulnerabilities Using Microsoft Copilot 60 minutes
You Try It! Fixing Vulnerabilities Using Microsoft Copilot 60 minutes
You Try It! Implementing Secure Coding Practices Using Copilot 60 minutes
You Try It! Conducting a Comprehensive Security Review Using Copilot 60 minutes

What's included

7 videos5 assignments1 peer review

7 videos Total 33 minutes

Instructions: Capstone Part 1 6 minutes
Instructions: Capstone Part 2 5 minutes
Instructions: Capstone Part 3 5 minutes
Instructions: Capstone Part 4 6 minutes
Instructions: Capstone Part 5 6 minutes
Course Conclusion: Web Application Security 2 minutes
Program Conclusion: Microsoft Front-End Developer Professional Certificate 3 minutes

5 assignments Total 150 minutes

Activity: Capstone Part 1 30 minutes
Activity: Capstone Part 2 30 minutes
Activity: Capstone Part 4 30 minutes
Activity: Capstone Part 5 30 minutes
Activity: Capstone Part 3 30 minutes

1 peer review Total 60 minutes

Peer Review Submission 60 minutes

Earn a career certificate

Add this credential to your LinkedIn profile, resume, or CV. Share it on social media and in your performance review.

Instructor

Instructor ratings

(7 ratings)

Microsoft

287 Courses 2,371,284 learners

Offered by

Microsoft

Why people choose Coursera for their career

Felipe M.

Learner since 2018

"To be able to take courses at my own pace and rhythm has been an amazing experience. I can learn whenever it fits my schedule and mood."

Jennifer J.

Learner since 2020

"I directly applied the concepts and skills I learned from my courses to an exciting new project at work."

Larry W.

Learner since 2021

"When I need courses on topics that my university doesn't offer, Coursera is one of the best places to go."

Chaitanya A.

"Learning isn't just about being better at your job: it's so much more than that. Coursera allows me to learn without limits."

Learner reviews

5 stars
94.73%
4 stars
5.26%
3 stars
0%
2 stars
0%
1 star
0%

Showing 3 of 19

Reviewed on Dec 4, 2025

It is a good course to start web development education with Microsoft product.

Reviewed on Mar 13, 2026

Khóa học rất tuyệt, nõ cung cấp cho tôi các kến thức về bảo mật WEB mà trươc đây còn mơ hồ

Reviewed on Jan 31, 2026

This course is a great way to learn the fundamentals of Web-based application.

Frequently asked questions

To access the course materials, assignments and to earn a Certificate, you will need to purchase the Certificate experience when you enroll in a course. You can try a Free Trial instead, or apply for Financial Aid. The course may offer 'Full Course, No Certificate' instead. This option lets you see all course materials, submit required assessments, and get a final grade. This also means that you will not be able to purchase a Certificate experience.

When you enroll in the course, you get access to all of the courses in the Certificate, and you earn a certificate when you complete the work. Your electronic Certificate will be added to your Accomplishments page - from there, you can print your Certificate or add it to your LinkedIn profile.

¹ Some assignments in this course are AI-graded. For these assignments, your data will be used in accordance with Coursera's Privacy Notice.