The Runtime Theory

topic / browser-input-security

Browser Input Security

Keep untrusted input safe across browser parsing and execution contexts.

Study XSS, contextual output encoding, sanitization, CSRF, CORS, CSP, cookies, URL validation, and framework escape hatches.

1 article · 1 video · 1 trace · 1 request flow · 1 interview · 5 total

Articles

browser input securitySep 25, 2026

Treat Browser Input as Data at Every Boundary

Browser security depends on keeping untrusted data from becoming executable code or changing the meaning of a command.

Request Flows

request flow · 5 stagesHow Treat Browser Input as Data at Every Boundary worksAn interactive concept flow for treat browser input as data at every boundary, from its assumptions through the main operation and boundary checks.

Videos

browser input securitySep 25, 2026

Video lesson: Treat Browser Input as Data at Every Boundary

Recording brief and narration plan for a visual lesson on treat browser input as data at every boundary.

Traces

trace 01 · cryptoTrace: Treat Browser Input as Data at Every BoundaryFollow the key state changes and boundary checks involved in treat browser input as data at every boundary.

Interviews

medium · t2Explain Treat Browser Input as Data at Every BoundaryExplain the model, execution steps, complexity, and limits of treat browser input as data at every boundary.

Explore adjacent

New lessons by email

Get new explanations about browser input security and related systems in your inbox.

One technical dispatch per week. No noise.