Skip to content

Tracks

AI-assisted engineering Working with AI Agents System design Core systems Data and AI systems Coding Coding problems Code review On-call SQL

Practice

Paths Concept guides

FreeAd-supported

The plan adds AI feedback and removes ads.

Concept guides/Security review/Missing security headers

CodingSecurity review

Missing security headers

Hard3 min read

Questions it teaches

CSRF double-submit cookie validationMedium20 min innerHTML with user inputMedium20 min Unescaped HTML injectionMedium20 min XSS in search results rendererMedium20 min Comment HTML injectionMedium18 min Transfer CSRF unprotectedMedium18 min Markup wraps untrusted HTMLHard25 min Unvalidated URL hrefHard22 min

Related

Security review Correctness review Secure coding Specs and prompts

Builds on: Correctness review

Spotting correctness bugs3 min Structured logging3 min

Builds on: Secure coding

Applied crypto & auth3 min WAL replay (crash recovery)3 min

Related: Specs and prompts

Prompting & writing specs3 min Describing your own practice6 min

© 2026 Prep Room·From California·AI can make mistakes.

About Legal Contact Cookies Your privacy choices

Home Review Tracks Paths