: Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF).
You cannot cram for this. Here is a 90-day roadmap: hackviser cwse exclusive