September 2018
Intermediate to advanced
250 pages
8h 22m
English
Client source code—the static JavaScript, HTML, and CSS executed in your browser—is different from the entire source code repo represented by an entire Git project. You're less likely to find a config file with application-level secrets and the scope of the business logic exposed will probably be minimal (even an all-JavaScript, Angular, or React app will feature most logic in a connected API) but there are still opportunities to harvest weak cookies, futz with client-side validations, and look for old settings, resources, and functionality in commented-out code.
Read now
Unlock full access