🌐 Web, API & secure coding
HTTP, REST, authentication, accessibility, testing and secure coding, practised against mock APIs.
11 missions🧪 7 live
CSE21Git Branching Treasure MapFollow a team as it branches, commits, merges and resolves a conflict, then read the history graph.
CSE22REST Request & ResponseBuild requests to a mock library API: choose the method, path, headers and body, and read the response.
CSE23Tiny Weather Mock APIA weather API for Indian cities, with query parameters, validation errors and caching headers.
CSE24Accessible DashboardBuild a small dashboard that works with a keyboard and a screen reader: headings, labels, contrast and focus.
CSE25TypeScript Escape RoomEach room is locked by a type error. Fix the types to escape, without using any.
CSE26CRUD ServiceA to-do service with create, read, update and delete, validation and pagination, against a mock backend.
CSE27Authentication with Fake IdentitiesLog in as fictional users and see how roles decide what each one may do. No real accounts are used.
CSE32Unit Test ChallengeThe function is written. Your job is the tests: find the inputs that break a buggy version.
CSE33Property-Based TestingInstead of single examples, test a property on hundreds of random inputs: sorting twice is the same as sorting once.
CSE34Secure Coding: Validation & InjectionA search box builds SQL by joining strings. Validate input and use parameters so an attacker cannot inject commands.
CSE35Web Threat-Model BoardDraw the data flows of a school-results website and list threats with STRIDE, then pick controls.
🗺️ HTTP request & response
The client resolves the name with DNS, opens a TLS connection and sends a request; the gateway checks keys and limits before the service answers.
Drag to turn, scroll to zoom, tap a block to see what it is.
The 2D diagram shows the exact flow, ports and trust boundaries. The 3D scene is a concept view of the same parts; packets travel along the same arrows.
📚 Reference documents
- An overview of HTTP · MDN
- OWASP Top Ten · OWASP
- Accessibility · MDN