Gradually, businesses are moving to an increasingly serverless architecture, building cloud-native applications that take advantage of reduced operational costs, fast scalability, high performance and reduced developer burden. Ultimately, cloud providers are offering convenience and reliability, at the expense of a loss of developer control and vendor lock-in.
Neglect server-side validation at your peril: without adequate protection your web application will be wide open to a host of malicious attacks: XSS attacks, and SQL/NoSQL injections. After briefly describing each of these threats, we will look at how client-side validation works and its (significant) limitations, before introducing common types of web attacks (XSS and injections), considering how to best defend yourself, as well as looking at a few example attacks.