> For the complete documentation index, see [llms.txt](https://cel1s0.gitbook.io/offsec-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cel1s0.gitbook.io/offsec-notes/portswigger-academy/client-side-topics.md).

# Client-side topics

- [Cross-site scripting](https://cel1s0.gitbook.io/offsec-notes/portswigger-academy/client-side-topics/cross-site-scripting.md): https://portswigger.net/web-security/cross-site-scripting
- [Cross-origin resource sharing (CORS)](https://cel1s0.gitbook.io/offsec-notes/portswigger-academy/client-side-topics/cross-origin-resource-sharing-cors.md): https://portswigger.net/web-security/cors
- [Cross-site request forgery (CSRF)](https://cel1s0.gitbook.io/offsec-notes/portswigger-academy/client-side-topics/cross-site-request-forgery-csrf.md): https://portswigger.net/web-security/csrf
- [Clickjacking (UI redressing)](https://cel1s0.gitbook.io/offsec-notes/portswigger-academy/client-side-topics/clickjacking-ui-redressing.md): https://portswigger.net/web-security/clickjacking
- [DOM-based vulnerabilities](https://cel1s0.gitbook.io/offsec-notes/portswigger-academy/client-side-topics/dom-based-vulnerabilities.md): https://portswigger.net/web-security/dom-based
- [Testing for WebSockets security vulnerabilities](https://cel1s0.gitbook.io/offsec-notes/portswigger-academy/client-side-topics/testing-for-websockets-security-vulnerabilities.md): https://portswigger.net/web-security/websockets