Hands On: Security in Angular Applications training
Hands On: Security in Angular Applications Intensiv-Schulung
Hands On: Security in Angular Applications
  • Lerne reale Angriffsvektoren wie XSS, CSRF und Injection kennen und abwehren
  • Implementiere OAuth 2.x und das Backend-For-Frontend (BFF)-Pattern sicher
  • 100 % praxisorientiert: Security-Tests direkt in deinen Entwicklungsprozess integrieren
Hands On: Security in Angular Applications Intensiv-Schulung
Angular.DE
Official German Community
5 Tage
Duration
95%
Recommendation Rate
Over 8.235 participants from leading companies learn with workshops.de
Logo of RWE Group Business Services GmbH, Dortmund
Logo of Generali
Logo of Allianz
Logo of adesso AG, Dortmund
Logo of Commerzbank AG, Frankfurt
Logo of Robert Bosch GmbH, Stuttgart
Logo of Pass Consulting Group
Logo of RWE Group Business Services GmbH, Dortmund
Logo of Generali
Logo of Allianz
Logo of adesso AG, Dortmund
Logo of Commerzbank AG, Frankfurt
Logo of Robert Bosch GmbH, Stuttgart
Logo of Pass Consulting Group

Hands On: Security in Angular Applications Intensiv-Schulung

Fortgeschrittene · 5 Tage · In-House

60% Hands-on Practice
Exercises with real projects from everyday development
Certified Trainers
Google Developer Experts & Community Experts
Bonus: Lifetime Access
Materials stay up to date — even after the workshop

In diesem praxisorientierten Workshop lernst du, Angular-Anwendungen systematisch gegen reale Angriffsvektoren abzusichern. Du arbeitest mit echten Angriffsszenarien, analysierst verwundbare Code-Beispiele und lernst die Sicherheitsmechanismen, die Angular und moderne Browser dir zur Verfügung stellen, tiefgehend kennen.

Der Fokus liegt auf den Themen, die in der Praxis am häufigsten zu Sicherheitsvorfällen führen: Cross-Site Scripting (XSS), Content Security Policy (CSP), sichere Token-Verwaltung im Browser, OAuth 2.x und OpenID Connect sowie das Backend-For-Frontend (BFF)-Pattern als Architekturantwort auf die Sicherheitsgrenzen von SPAs.

Am Ende des Workshops weißt du nicht nur, was die Schwachstellen sind, sondern wie du sie in deinen eigenen Angular-Projekten zuverlässig erkennst, verhindert und testest.


Agenda

Logo

Browser-Sicherheitsgrundlagen & Same Origin Policy

  • Same Origin Policy und CORS: Grundlagen und Konfiguration
  • Wie Browser Inhalte isolieren und welche Grenzen es gibt
  • Umgang mit bösartigem JavaScript im Browser
  • Überblick typischer Angriffsvektoren gegen Angular-Anwendungen
  • Hands-on: Schwachstellen im Browser DevTools analysieren

Logo

Cross-Site Scripting (XSS) in Angular

  • Wie Angular XSS-Angriffe standardmäßig verhindert – und wann es versagt
  • DomSanitizer korrekt einsetzen: bypassSecurityTrust* sicher verwenden
  • Typische XSS-Fallen in Angular-Templates, Routing und Drittbibliotheken
  • Trusted Types in Angular aktivieren und konfigurieren
  • Hands-on: Verwundbare Angular-App angreifen und absichern

Logo

Content Security Policy (CSP)

  • Was CSP leistet – und was nicht
  • CSP-Direktiven im Detail: script-src, style-src, connect-src und mehr
  • Häufige Fehler bei CSP-Konfigurationen und wie du sie vermeidest
  • Strict CSP mit Nonces für Angular-Anwendungen implementieren
  • CSP im Angular-Build-Prozess integrieren und testen
  • Hands-on: CSP-Policy für eine Angular-Anwendung konfigurieren und debuggen

Logo

Sichere Token-Verwaltung & OAuth 2.x

  • Sicherheitsrisiken bei der Token-Speicherung im Browser (localStorage, sessionStorage, Cookies)
  • OAuth 2.0/2.1 und OpenID Connect: Grundlagen und Sicherheitsimplikationen
  • PKCE-Flow und warum er für SPAs zwingend ist
  • Sicherheitsempfehlungen für den Einsatz von OAuth 2.x direkt in Angular
  • Hands-on: OAuth 2.x-Flow sicher in Angular implementieren

Logo

Backend-For-Frontend (BFF)-Pattern

  • Warum SPAs strukturelle Sicherheitsgrenzen bei OAuth haben
  • Das BFF-Pattern als Architekturantwort: Konzept und Vorteile
  • Token-Handling serverseitig: Cookies vs. Bearer Tokens
  • Wann lohnt sich der BFF-Aufwand – und wann nicht?
  • Hands-on: Angular-App mit BFF-Backend absichern

Logo

Vulnerability Scanning & Security im Entwicklungsprozess

  • Statische Analyse: ESLint-Security-Plugins, npm audit, Snyk
  • Dynamische Analyse: OWASP ZAP und weitere Tools im Überblick
  • Security-Tests in CI/CD-Pipelines integrieren
  • OWASP Top 10 für Angular-Entwickler:innen
  • Abschluss: Checkliste für sichere Angular-Anwendungen & nächste Schritte

What you should know

Prerequisites
  • Grundlegende Angular-Kenntnisse – du solltest bereits eigene Angular-Anwendungen entwickelt haben
  • TypeScript-Kenntnisse – sicherer Umgang mit TypeScript wird vorausgesetzt
  • Grundlegendes Verständnis von HTTP – wie Requests, Responses, Headers und Cookies funktionieren
  • Entwicklungsumgebung: Node.js (aktuell LTS), Angular CLI und ein Editor (VS Code empfohlen) sollten installiert sein

Vorkenntnisse in Websicherheit sind hilfreich, aber nicht erforderlich. Alle Security-Konzepte werden im Workshop eingeführt.

Target Audience

This Hands On: Security in Angular Applications course is aimed at Fortgeschrittene.


What's Included

Certificate of Participation
Shareable on LinkedIn Logo
Virtual classroom
Interactive learning platform with exercises and materials
Bonus
Lifetime Access
Including updates to training materials
In-House/Corporate Seminars
Customized adaptations available
On-site at your location or online
Available in German and English

Request in-house/corporate training

Interested in an in-house Hands On: Security in Angular Applications training for your team or company?
Submit a request and book a preliminary meeting with our advisor.
Tailored training to your needs
On-site or remote for multiple employees
German and English available
Robin Böhm, CEO of workshops.de
Robin Böhm
CEO of workshops.de

What our participants say

Profile picture of Florian Pauly
Florian Pauly
Junior Software Developer

Attended Angular: Modul 1 - Komponenten, Reaktivität & Schnittstellen Intensiv-Schulung

Profile picture of Thomas Stolz
Thomas Stolz
IT Application Manager Development

Attended Angular: Modul 1 - Komponenten, Reaktivität & Schnittstellen Intensiv-Schulung

Participant illustration
Anonymized on request
Participant

Attended Angular: Modul 2 - Architektur, Qualität & Mono-Repositories Intensiv-Schulung

Participant illustration
Anonymized on request
Participant

Attended Angular: Modul 1 - Komponenten, Reaktivität & Schnittstellen Intensiv-Schulung

Profile picture of Maximilian Boll
Maximilian Boll
Participant

Attended Angular: Modul 1 - Komponenten, Reaktivität & Schnittstellen Intensiv-Schulung

Participant illustration
Selim Incirkus
Participant

Attended Angular: Modul 1 - Komponenten, Reaktivität & Schnittstellen Intensiv-Schulung

Questions and answers

Our public Hands On: Security in Angular Applications remote courses take place from 9:00 AM to 1:00 PM, on-site Hands On: Security in Angular Applications trainings from 9:00 AM to 4:30 PM.

For in-house seminars, individual adjustments are possible.

Yes. At the end of each of our Hands On: Security in Angular Applications seminars, participants receive a signed certificate of attendance.

The certificate includes a verification URL and can be shared on your LinkedIn profile. Learn more about managing certificates on LinkedIn.

Yes, we offer our Hands On: Security in Angular Applications seminars in German and English.

Public dates are held in German, unless explicitly stated otherwise.

In-house seminars can be conducted in the desired language.

All materials and exercises are fully available in English.

Yes. We offer our Hands On: Security in Angular Applications seminars both remotely and on-site. Thanks to our virtual classroom, you can conveniently participate in our workshops from anywhere. Our online presentations are regularly updated, and you have permanent access after the training. Exercises can be accessed and unlocked through an online interface, and we have added additional tasks to prepare you for remote workshops.

We also offer in-house seminars and public trainings on-site. In our schedule overview, you can see the respective venue of the trainings. For in-house trainings, we are happy to discuss the venue details individually with you.

For public Hands On: Security in Angular Applications seminars, we use the online meeting tool Zoom alongside our classroom.
A test link is also included in the preparation to let you try out the technology. The remote workshop is designed so that everyone works from different locations with their own computer.

For in-house seminars, we can conduct the meeting via Zoom or Microsoft Teams.
Other meeting software may be used by arrangement.

In-house Hands On: Security in Angular Applications trainings: Individual consulting with code mentoring

For our in-house seminars, we additionally offer code mentoring.

What is code mentoring?

  • Ask-Me-Anything sessions: Clarify questions and uncertainties from the course directly with an expert.
  • Code review: Submit your own code snippets and have them analyzed and evaluated by experts.
  • Advanced topics: Ask in-depth questions about the course topic to expand your knowledge.
Public Hands On: Security in Angular Applications trainings: Exchange on our community Discord

For participants of public trainings, we recommend joining our community Discord server.

Your benefits on Discord:

  • Diverse channels for questions and discussions – beyond the course topic.
  • An engaged community that supports you in learning.

Yes. You can enter your routing ID directly in our order form. Our invoices are sent as ZUGFeRD PDFs right after booking.
If you have provided a routing ID, our team will be notified and we will handle the upload to the portal. If we need additional information, we will contact you after booking.

Team profile pictures
Still have questions?

Just send us an email. If you prefer a more personal contact, Britta is also happy to receive a call from you!

Weekdays from 8 AM to 1 PM

info@workshops.de

+49 30 / 75437336

In-House Training
Individual Pricing
Inquire Now