SO I teach an HTML programming class. We learn all the standard HTML tags that one would use. Was looking through the textbook and I noticed there is not much emphasis in terms of security. So far the only thing I can think of in terms of security is to make sure you host your images and scripts on your servers. What other security measures should I teach them? Remember, they only know HTML – nothing else.
Share
Security is not normally achieved through HTML. HTML is only designed as a markup language to display data.. In web development it is known as an exclusively front end language.
HTML is passed to the client completely. You should never hide data in HTML or java script. The user can see your code by using the development tools.
If you want to teach your students about web security I would start looking into PHP, asp.net, jsp and ruby languages HTML poses almost no threat because its role is to format and display information. Processing and data retrieval is done by the more advanced back end languages.
I hate to point this out, but HTML is not a programing language. It is simply markup.