🧒 Explain like I'm 5
XSS: An attacker secretly inserts a command script into your book, causing anyone who reads it to follow the instructions (executing strange code on the page). CSRF: An attacker forges your signature to send commands to the bank, exploiting the fact that the bank already trusts you (leveraging your session cookie).
Interactive quiz
Check your understanding with an instant-feedback quick check.
Detailed notes
Senior-level deep dive: internals, pitfalls, and a self-interview ladder.
Practice with AI feedback
Answer out loud, get scored on correctness, depth, and clarity.