Workshop Security in Web Topics Https SQL Injection XSS CSRF CORS Content headers Dependencies Password policies Cookies