Browser Security Lab: Cookies, CORS, CSP, and the Attack You Missed

This is a practical browser security session, not a slide deck of acronyms. Participants will exploit a small intentionally vulnerable app, then fix it using secure cookies, SameSite rules, CORS boundaries, content security policy, and safer form flows.

The format keeps the focus on cause and effect: change one header, reload, observe what the browser allows or blocks, then document the tradeoff. It is ideal for developers who touch login, dashboards, forms, APIs, or embedded widgets.