Skip to content
WebDev Path
Back

Week 20: Security, testing and CI

Next video

Free lesson by Fireship on YouTube

About this lesson

Module:
Backend and databases
Time:
about 11 hours
Video:
9 min

Ship code you can trust: safe by default and checked on every push.

By the end of this week you can

  • Keep secrets in environment variables
  • Write unit tests with Vitest
  • Run checks on every push with GitHub Actions

Learn

  • Environment variables and secrets
  • Input validation, CORS and rate limits
  • Unit tests with Vitest
  • CI with GitHub Actions

Read or watch

Practice

  1. Write 10 tests for your API
  2. Add a CI workflow that runs lint, tests and build

Build

Finish and deploy Project 5: full-stack app with accounts.

Check your understanding

Score 4 out of 5 to complete this week.

  1. 1. What does XSS stand for?
  2. 2. Which header limits where scripts can load from?
  3. 3. What is a unit test?
  4. 4. What does CI usually do on every push?
  5. 5. What is rate limiting for?
0 of 5 answered