---
title: "Security & OWASP track · vuejs.school"
description: "7 lessons, in order. They build on Beginner 10, but you can open any lesson at any time."
canonical_url: "https://vuejs.school/track/security"
meta:
  "og:description": "7 lessons, in order. They build on Beginner 10, but you can open any lesson at any time."
  "og:image": "https://vuejs.school/_og/d/a_~U2VjdXJpdHkgJiBPV0FTUCB0cmFjayDCtyB2dWVqcy5zY2hvb2w%2Cc_OgCard.takumi%2Ctitle_~U2VjdXJpdHkgJiBPV0FTUCB0cmFjaw%2Cdescription_~NyBsZXNzb25zLCBpbiBvcmRlci4gVGhleSBidWlsZCBvbiBCZWdpbm5lciAxMCwgYnV0IHlvdSBjYW4gb3BlbiBhbnkgbGVzc29uIGF0IGFueSB0aW1lLg%2Ceyebrow_~U2tpbGwgdHJlZSDCtyA3IGxlc3NvbnM%2Ctint_lilac%2Cp_Ii90cmFjay9zZWN1cml0eSI%2Cs_8oi-dhCqHnv2ISBc.png"
  "og:image:alt": "Security & OWASP track · vuejs.school"
  "og:image:height": "600"
  "og:image:type": image/png
  "og:image:width": "1200"
  "og:title": "Security & OWASP track · vuejs.school"
  "twitter:image": "https://vuejs.school/_og/d/a_~U2VjdXJpdHkgJiBPV0FTUCB0cmFjayDCtyB2dWVqcy5zY2hvb2w%2Cc_OgCard.takumi%2Ctitle_~U2VjdXJpdHkgJiBPV0FTUCB0cmFjaw%2Cdescription_~NyBsZXNzb25zLCBpbiBvcmRlci4gVGhleSBidWlsZCBvbiBCZWdpbm5lciAxMCwgYnV0IHlvdSBjYW4gb3BlbiBhbnkgbGVzc29uIGF0IGFueSB0aW1lLg%2Ceyebrow_~U2tpbGwgdHJlZSDCtyA3IGxlc3NvbnM%2Ctint_lilac%2Cp_Ii90cmFjay9zZWN1cml0eSI%2Cs_8oi-dhCqHnv2ISBc.png"
  "twitter:image:alt": "Security & OWASP track · vuejs.school"
---

> Index of every page on this site: [llms.txt](https://vuejs.school/llms.txt)

**Grows from **[Beginner 10 · Lifecycle and template refs](https://vuejs.school/track/beginner)

# **Security & OWASP**

7 lessons, in order. They build on Beginner 10, but you can open any lesson at any time.

0 of 7 done

[**Start: The OWASP Top 10, for Vue developers**](https://vuejs.school/learn/security/the-owasp-top-10-for-vue-developers)

**Security & OWASP**Builds on Beginner 10 · 0 of 7 done

[01**The OWASP Top 10, for Vue developers**](https://vuejs.school/learn/security/the-owasp-top-10-for-vue-developers)

[02**Authentication, sessions and CSRF**](https://vuejs.school/learn/security/authentication-and-session-failures)

[03**Broken access control and SSRF**](https://vuejs.school/learn/security/broken-access-control)

[04**Injection and cross-site scripting**](https://vuejs.school/learn/security/injection-and-cross-site-scripting)

[05**Security misconfiguration, headers and CSP**](https://vuejs.school/learn/security/security-headers-and-csp)

[06**Supply chain and integrity**](https://vuejs.school/learn/security/supply-chain-and-integrity)

[07**API security, errors and logging**](https://vuejs.school/learn/security/api-security-error-handling-and-ai)

```json
{"@context":"https://schema.org","@graph":[{"@id":"https://vuejs.school/#website","@type":"WebSite","description":"A free AI-instructed school for Vue.js. Short tutorials, runnable code and quizzes that adapt to you.","name":"vuejs.school","url":"https://vuejs.school/","publisher":{"@id":"https://vuejs.school/#identity"}},{"@id":"https://vuejs.school/track/security#webpage","@type":"WebPage","description":"7 lessons, in order. They build on Beginner 10, but you can open any lesson at any time.","name":"Security & OWASP track","url":"https://vuejs.school/track/security","breadcrumb":{"@id":"https://vuejs.school/track/security#breadcrumb"},"isPartOf":{"@id":"https://vuejs.school/#website"},"potentialAction":[{"@type":"ReadAction","target":["https://vuejs.school/track/security"]}],"primaryImageOfPage":{"@id":"https://vuejs.school/#logo"}},{"@id":"https://vuejs.school/#identity","@type":"Organization","description":"A free AI-instructed school for Vue.js. Short tutorials, runnable code and quizzes that adapt to you.","name":"vuejs.school","url":"https://vuejs.school","logo":{"@id":"https://vuejs.school/#logo"}},{"@id":"https://vuejs.school/track/security#/schema/course/1","@type":"Course","description":"7 lessons, in order. They build on Beginner 10, but you can open any lesson at any time.","inLanguage":"en","isAccessibleForFree":true,"name":"Security & OWASP track","provider":{"@id":"https://vuejs.school/#identity"},"teaches":["The OWASP Top 10, for Vue developers","Authentication, sessions and CSRF","Broken access control and SSRF","Injection and cross-site scripting","Security misconfiguration, headers and CSP","Supply chain and integrity","API security, errors and logging"]},{"@id":"https://vuejs.school/track/security#breadcrumb","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","name":"Skill tree","item":"https://vuejs.school/track","position":1},{"@type":"ListItem","name":"Security & OWASP","position":2}]},{"@id":"https://vuejs.school/#logo","@type":"ImageObject","caption":"vuejs.school","contentUrl":"https://vuejs.school/apple-touch-icon.png","inLanguage":"en","url":"https://vuejs.school/apple-touch-icon.png"}]}
```