CINXE.COM

<!doctype html><html lang="en-US" prefix="og: https://ogp.me/ns#"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="icon" href="https://developer.mozilla.org/favicon-48x48.bc390275e955dacb2e65.png"/><link rel="apple-touch-icon" href="https://developer.mozilla.org/apple-touch-icon.528534bba673c38049c2.png"/><meta name="theme-color" content="#ffffff"/><link rel="manifest" href="https://developer.mozilla.org/manifest.f42880861b394dd4dc9b.json"/><link rel="search" type="application/opensearchdescription+xml" href="/opensearch.xml" title="MDN Web Docs"/><title>5. Security and privacy | MDN Curriculum</title><link rel="preload" as="font" type="font/woff2" href="/static/media/Inter.var.c2fe3cb2b7c746f7966a.woff2" crossorigin=""/><link rel="alternate" type="application/rss+xml" title="MDN Blog RSS Feed" href="https://developer.mozilla.org/en-US/blog/rss.xml" hrefLang="en"/><meta name="description" content="Learn how to protect data from unauthorized access and how to treat user data responsibly."/><meta property="og:url" content="https://developer.mozilla.org/en-US/curriculum/extensions/security-and-privacy/"/><meta property="og:title" content="5. Security and privacy | MDN Curriculum"/><meta property="og:type" content="website"/><meta property="og:locale" content="en_US"/><meta property="og:description" content="Learn how to protect data from unauthorized access and how to treat user data responsibly."/><meta property="og:image" content="https://developer.mozilla.org/mdn-social-share.d893525a4fb5fb1f67a2.png"/><meta property="og:image:type" content="image/png"/><meta property="og:image:height" content="1080"/><meta property="og:image:width" content="1920"/><meta property="og:image:alt" content="The MDN Web Docs logo, featuring a blue accent color, displayed on a solid black background."/><meta property="og:site_name" content="MDN Web Docs"/><meta name="twitter:card" content="summary_large_image"/><meta name="twitter:creator" content="MozDevNet"/><link rel="canonical" href="https://developer.mozilla.org/en-US/curriculum/extensions/security-and-privacy/"/><style media="print">.article-actions-container,.document-toc-container,.language-menu,.main-menu-toggle,.on-github,.page-footer,.place,.sidebar,.top-banner,.top-navigation-main,ul.prev-next{display:none!important}.main-page-content,.main-page-content pre{padding:2px}.main-page-content pre{border-left-width:2px}</style><script src="/static/js/gtag.js" defer=""></script><script defer="" src="/static/js/main.5e889624.js"></script><link href="/static/css/main.26c64ea7.css" rel="stylesheet"/></head><body><script>if(document.body.addEventListener("load",(t=>{t.target.classList.contains("interactive")&&t.target.setAttribute("data-readystate","complete")}),{capture:!0}),window&&document.documentElement){const t={light:"#ffffff",dark:"#1b1b1b"};try{const e=window.localStorage.getItem("theme");e&&(document.documentElement.className=e,document.documentElement.style.backgroundColor=t[e]);const o=window.localStorage.getItem("nop");o&&(document.documentElement.dataset.nop=o)}catch(t){console.warn("Unable to read theme from localStorage",t)}}</script><div id="root"><ul id="nav-access" class="a11y-nav"><li><a id="skip-main" href="#content">Skip to main content</a></li><li><a id="skip-search" href="#top-nav-search-input">Skip to search</a></li></ul><div class="page-wrapper curriculum"><div class="top-banner loading"><section class="place top container"></section></div><div class="sticky-header-container"><header class="top-navigation "><div class="container "><div class="top-navigation-wrap"><a href="/en-US/" class="logo" aria-label="MDN homepage"><svg id="mdn-docs-logo" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 361 104.2" style="enable-background:new 0 0 361 104.2" xml:space="preserve" role="img"><title>MDN Web Docs</title><path d="M197.6 73.2h-17.1v-5.5h3.8V51.9c0-3.7-.7-6.3-2.1-7.9-1.4-1.6-3.3-2.3-5.7-2.3-3.2 0-5.6 1.1-7.2 3.4s-2.4 4.6-2.5 6.9v15.6h6v5.5h-17.1v-5.5h3.8V51.9c0-3.8-.7-6.4-2.1-7.9-1.4-1.5-3.3-2.3-5.6-2.3-3.2 0-5.5 1.1-7.2 3.3-1.6 2.2-2.4 4.5-2.5 6.9v15.8h6.9v5.5h-20.2v-5.5h6V42.4h-6.1v-5.6h13.4v6.4c1.2-2.1 2.7-3.8 4.7-5.2 2-1.3 4.4-2 7.3-2s5.3.7 7.5 2.1c2.2 1.4 3.7 3.5 4.5 6.4 1.1-2.5 2.7-4.5 4.9-6.1s4.8-2.4 7.9-2.4c3.5 0 6.5 1.1 8.9 3.3s3.7 5.6 3.7 10.2v18.2h6.1v5.5zm42.5 0h-13.2V66c-1.2 2.2-2.8 4.1-4.9 5.6-2.1 1.6-4.8 2.4-8.3 2.4-4.8 0-8.7-1.6-11.6-4.9-2.9-3.2-4.3-7.7-4.3-13.3 0-5 1.3-9.6 4-13.7 2.6-4.1 6.9-6.2 12.8-6.2s9.8 2.2 12.3 6.5V22.7h-8.6v-5.6h15.8v50.6h6v5.5zm-13.3-16.8V52c-.1-3-1.2-5.5-3.2-7.3s-4.4-2.8-7.2-2.8c-3.6 0-6.3 1.3-8.2 3.9-1.9 2.6-2.8 5.8-2.8 9.6 0 4.1 1 7.3 3 9.5s4.5 3.3 7.4 3.3c3.2 0 5.8-1.3 7.8-3.8 2.1-2.6 3.1-5.3 3.2-8zm61.5 16.8H269v-5.5h6V51.9c0-3.7-.7-6.3-2.2-7.9-1.4-1.6-3.4-2.3-5.7-2.3-3.1 0-5.6 1-7.4 3s-2.8 4.4-2.9 7v15.9h6v5.5h-19.3v-5.5h6V42.4h-6.2v-5.6h13.6V43c2.6-4.6 6.8-6.9 12.7-6.9 3.6 0 6.7 1.1 9.2 3.3s3.7 5.6 3.7 10.2v18.2h6v5.4h-.2z" class="logo-text"></path><path d="M42 .2 13.4 92.3H1.7L30.2.2Zm10.4 0v92.1H42V.2Zm40.3 0L64.2 92.3H52.5L81 .2Zm10.4 0v92.1H92.7V.2Z" class="logo-m"></path><path d="M294 95h67v8.8h-67z" class="logo-_"></path></svg></a><button title="Open main menu" type="button" class="button action has-icon main-menu-toggle" aria-haspopup="menu" aria-label="Open main menu" aria-expanded="false"><span class="button-wrap"><span class="icon icon-menu "></span><span class="visually-hidden">Open main menu</span></span></button></div><div class="top-navigation-main"><nav class="main-nav" aria-label="Main menu"><ul class="main-menu nojs"><li class="top-level-entry-container "><button type="button" id="references-button" class="top-level-entry menu-toggle" aria-controls="references-menu" aria-expanded="false">References</button><a href="/en-US/docs/Web" class="top-level-entry">References</a><ul id="references-menu" class="submenu references hidden inline-submenu-lg" aria-labelledby="references-button"><li class="apis-link-container mobile-only "><a href="/en-US/docs/Web" class="submenu-item "><div class="submenu-icon"></div><div class="submenu-content-container"><div class="submenu-item-heading">Overview / Web Technology</div><p class="submenu-item-description">Web technology reference for developers</p></div></a></li><li class="html-link-container "><a href="/en-US/docs/Web/HTML" class="submenu-item "><div class="submenu-icon html"></div><div class="submenu-content-container"><div class="submenu-item-heading">HTML</div><p class="submenu-item-description">Structure of content on the web</p></div></a></li><li class="css-link-container "><a href="/en-US/docs/Web/CSS" class="submenu-item "><div class="submenu-icon css"></div><div class="submenu-content-container"><div class="submenu-item-heading">CSS</div><p class="submenu-item-description">Code used to describe document style</p></div></a></li><li class="javascript-link-container "><a href="/en-US/docs/Web/JavaScript" class="submenu-item "><div class="submenu-icon javascript"></div><div class="submenu-content-container"><div class="submenu-item-heading">JavaScript</div><p class="submenu-item-description">General-purpose scripting language</p></div></a></li><li class="http-link-container "><a href="/en-US/docs/Web/HTTP" class="submenu-item "><div class="submenu-icon http"></div><div class="submenu-content-container"><div class="submenu-item-heading">HTTP</div><p class="submenu-item-description">Protocol for transmitting web resources</p></div></a></li><li class="apis-link-container "><a href="/en-US/docs/Web/API" class="submenu-item "><div class="submenu-icon apis"></div><div class="submenu-content-container"><div class="submenu-item-heading">Web APIs</div><p class="submenu-item-description">Interfaces for building web applications</p></div></a></li><li class="apis-link-container "><a href="/en-US/docs/Mozilla/Add-ons/WebExtensions" class="submenu-item "><div class="submenu-icon"></div><div class="submenu-content-container"><div class="submenu-item-heading">Web Extensions</div><p class="submenu-item-description">Developing extensions for web browsers</p></div></a></li><li class="apis-link-container desktop-only "><a href="/en-US/docs/Web" class="submenu-item "><div class="submenu-icon"></div><div class="submenu-content-container"><div class="submenu-item-heading">Web Technology</div><p class="submenu-item-description">Web technology reference for developers</p></div></a></li></ul></li><li class="top-level-entry-container "><button type="button" id="guides-button" class="top-level-entry menu-toggle" aria-controls="guides-menu" aria-expanded="false">Guides</button><a href="/en-US/docs/Learn" class="top-level-entry">Guides</a><ul id="guides-menu" class="submenu guides hidden inline-submenu-lg" aria-labelledby="guides-button"><li class="apis-link-container mobile-only "><a href="/en-US/docs/Learn" class="submenu-item "><div class="submenu-icon learn"></div><div class="submenu-content-container"><div class="submenu-item-heading">Overview / MDN Learning Area</div><p class="submenu-item-description">Learn web development</p></div></a></li><li class="apis-link-container desktop-only "><a href="/en-US/docs/Learn" class="submenu-item "><div class="submenu-icon learn"></div><div class="submenu-content-container"><div class="submenu-item-heading">MDN Learning Area</div><p class="submenu-item-description">Learn web development</p></div></a></li><li class="html-link-container "><a href="/en-US/docs/Learn/HTML" class="submenu-item "><div class="submenu-icon html"></div><div class="submenu-content-container"><div class="submenu-item-heading">HTML</div><p class="submenu-item-description">Learn to structure web content with HTML</p></div></a></li><li class="css-link-container "><a href="/en-US/docs/Learn/CSS" class="submenu-item "><div class="submenu-icon css"></div><div class="submenu-content-container"><div class="submenu-item-heading">CSS</div><p class="submenu-item-description">Learn to style content using CSS</p></div></a></li><li class="javascript-link-container "><a href="/en-US/docs/Learn/JavaScript" class="submenu-item "><div class="submenu-icon javascript"></div><div class="submenu-content-container"><div class="submenu-item-heading">JavaScript</div><p class="submenu-item-description">Learn to run scripts in the browser</p></div></a></li><li class=" "><a href="/en-US/docs/Web/Accessibility" class="submenu-item "><div class="submenu-icon"></div><div class="submenu-content-container"><div class="submenu-item-heading">Accessibility</div><p class="submenu-item-description">Learn to make the web accessible to all</p></div></a></li></ul></li><li class="top-level-entry-container "><button type="button" id="mdn-plus-button" class="top-level-entry menu-toggle" aria-controls="mdn-plus-menu" aria-expanded="false">Plus</button><a href="/en-US/plus" class="top-level-entry">Plus</a><ul id="mdn-plus-menu" class="submenu mdn-plus hidden inline-submenu-lg" aria-labelledby="mdn-plus-button"><li class=" "><a href="/en-US/plus" class="submenu-item "><div class="submenu-icon"></div><div class="submenu-content-container"><div class="submenu-item-heading">Overview</div><p class="submenu-item-description">A customized MDN experience</p></div></a></li><li class=" "><a href="/en-US/plus/ai-help" class="submenu-item "><div class="submenu-icon"></div><div class="submenu-content-container"><div class="submenu-item-heading">AI Help</div><p class="submenu-item-description">Get real-time assistance and support</p></div></a></li><li class=" "><a href="/en-US/plus/updates" class="submenu-item "><div class="submenu-icon"></div><div class="submenu-content-container"><div class="submenu-item-heading">Updates</div><p class="submenu-item-description">All browser compatibility updates at a glance</p></div></a></li><li class=" "><a href="/en-US/plus/docs/features/overview" class="submenu-item "><div class="submenu-icon"></div><div class="submenu-content-container"><div class="submenu-item-heading">Documentation</div><p class="submenu-item-description">Learn how to use MDN Plus</p></div></a></li><li class=" "><a href="/en-US/plus/docs/faq" class="submenu-item "><div class="submenu-icon"></div><div class="submenu-content-container"><div class="submenu-item-heading">FAQ</div><p class="submenu-item-description">Frequently asked questions about MDN Plus</p></div></a></li></ul></li><li class="top-level-entry-container active"><a class="top-level-entry menu-link" href="/en-US/curriculum/">Curriculum <sup class="new">New</sup></a></li><li class="top-level-entry-container "><a class="top-level-entry menu-link" href="/en-US/blog/">Blog</a></li><li class="top-level-entry-container "><button type="button" id="tools-button" class="top-level-entry menu-toggle" aria-controls="tools-menu" aria-expanded="false">Tools</button><ul id="tools-menu" class="submenu tools hidden inline-submenu-lg" aria-labelledby="tools-button"><li class=" "><a href="/en-US/play" class="submenu-item "><div class="submenu-icon"></div><div class="submenu-content-container"><div class="submenu-item-heading">Playground</div><p class="submenu-item-description">Write, test and share your code</p></div></a></li><li class=" "><a href="/en-US/observatory" class="submenu-item "><div class="submenu-icon"></div><div class="submenu-content-container"><div class="submenu-item-heading">HTTP Observatory</div><p class="submenu-item-description">Scan a website for free</p></div></a></li><li class=" "><a href="/en-US/plus/ai-help" class="submenu-item "><div class="submenu-icon"></div><div class="submenu-content-container"><div class="submenu-item-heading">AI Help</div><p class="submenu-item-description">Get real-time assistance and support</p></div></a></li></ul></li></ul></nav><div class="header-search"><form action="/en-US/search" class="search-form search-widget" id="top-nav-search-form" role="search"><label id="top-nav-search-label" for="top-nav-search-input" class="visually-hidden">Search MDN</label><input aria-activedescendant="" aria-autocomplete="list" aria-controls="top-nav-search-menu" aria-expanded="false" aria-labelledby="top-nav-search-label" autoComplete="off" id="top-nav-search-input" role="combobox" type="search" class="search-input-field" name="q" placeholder=" " required="" value=""/><button type="button" class="button action has-icon clear-search-button"><span class="button-wrap"><span class="icon icon-cancel "></span><span class="visually-hidden">Clear search input</span></span></button><button type="submit" class="button action has-icon search-button"><span class="button-wrap"><span class="icon icon-search "></span><span class="visually-hidden">Search</span></span></button><div id="top-nav-search-menu" role="listbox" aria-labelledby="top-nav-search-label"></div></form></div><div class="theme-switcher-menu"><button type="button" class="button action has-icon theme-switcher-menu small" aria-haspopup="menu"><span class="button-wrap"><span class="icon icon-theme-os-default "></span>Theme</span></button></div><ul class="auth-container"><li><a href="/users/fxa/login/authenticate/?next=%2Fen-US%2Fcurriculum%2Fextensions%2Fsecurity-and-privacy%2F" class="login-link" rel="nofollow">Log in</a></li><li><a href="/users/fxa/login/authenticate/?next=%2Fen-US%2Fcurriculum%2Fextensions%2Fsecurity-and-privacy%2F" target="_self" rel="nofollow" class="button primary mdn-plus-subscribe-link"><span class="button-wrap">Sign up for free</span></a></li></ul></div></div></header><div class="article-actions-container"><div class="container"><button type="button" class="button action has-icon sidebar-button" aria-label="Expand sidebar" aria-expanded="false" aria-controls="sidebar-quicklinks"><span class="button-wrap"><span class="icon icon-sidebar "></span></span></button><nav class="breadcrumbs-container" aria-label="Breadcrumb"><ol typeof="BreadcrumbList" vocab="https://schema.org/" aria-label="breadcrumbs"><li property="itemListElement" typeof="ListItem"><a href="/en-US/curriculum/" class="breadcrumb" property="item" typeof="WebPage"><span property="name">MDN Curriculum</span></a><meta property="position" content="1"/></li><li property="itemListElement" typeof="ListItem"><a href="/en-US/curriculum/extensions/" class="breadcrumb" property="item" typeof="WebPage"><span property="name">Extensions modules</span></a><meta property="position" content="2"/></li><li property="itemListElement" typeof="ListItem"><a href="/en-US/curriculum/extensions/security-and-privacy/" class="breadcrumb-current-page" property="item" typeof="WebPage"><span property="name">5. Security and privacy</span></a><meta property="position" content="3"/></li></ol></nav></div></div></div><main class="curriculum-content-container container with-sidebar main-wrapper curriculum-module topic-practices"><div class="sidebar-container"><aside id="sidebar-quicklinks" class="sidebar"><button type="button" class="button action backdrop" aria-label="Collapse sidebar"><span class="button-wrap"></span></button><nav aria-label="Related Topics" class="sidebar-inner"><div class="sidebar-inner-nav"><div class="in-nav-toc"><div class="document-toc-container"><section class="document-toc"><header><h2 class="document-toc-heading">In this module</h2></header><ul class="document-toc-list"><li class="document-toc-item "><a class="document-toc-link" href="#5.1_security_and_privacy_basics">5.1 Security and privacy basics</a></li><li class="document-toc-item "><a class="document-toc-link" href="#5.2_data_protection_laws">5.2 Data protection laws</a></li></ul></section></div></div><aside class="curriculum-sidebar " data-current="/en-US/curriculum/extensions/security-and-privacy/"><ol><li class=""><a href="/en-US/curriculum/">MDN Curriculum</a></li><li class=""><a href="/en-US/curriculum/about-curriculum/">About Curriculum</a></li><li class="toggle"><details><summary>Getting started modules</summary><ol><li><a href="/en-US/curriculum/getting-started/">Getting started overview</a></li><li><a href="/en-US/curriculum/getting-started/soft-skills/">1. Soft skills</a></li><li><a href="/en-US/curriculum/getting-started/environment-setup/">2. Environment setup</a></li></ol></details></li><li class="toggle"><details><summary>Core modules</summary><ol><li><a href="/en-US/curriculum/core/">Core overview</a></li><li><a href="/en-US/curriculum/core/web-standards/">1. Web standards</a></li><li><a href="/en-US/curriculum/core/semantic-html/">2. Semantic HTML</a></li><li><a href="/en-US/curriculum/core/css-fundamentals/">3. CSS fundamentals</a></li><li><a href="/en-US/curriculum/core/css-text-styling/">4. CSS text styling</a></li><li><a href="/en-US/curriculum/core/css-layout/">5. CSS layout</a></li><li><a href="/en-US/curriculum/core/javascript-fundamentals/">6. JavaScript fundamentals</a></li><li><a href="/en-US/curriculum/core/accessibility/">7. Accessibility</a></li><li><a href="/en-US/curriculum/core/design-for-developers/">8. Design for developers</a></li><li><a href="/en-US/curriculum/core/version-control/">9. Version control</a></li></ol></details></li><li class="toggle"><details open=""><summary>Extensions modules</summary><ol><li><a href="/en-US/curriculum/extensions/">Extensions overview</a></li><li><a href="/en-US/curriculum/extensions/transform-and-animate-css/">1. Transform & animate CSS</a></li><li><a href="/en-US/curriculum/extensions/custom-js-objects/">2. Custom JS objects</a></li><li><a href="/en-US/curriculum/extensions/web-apis/">3. Web APIs</a></li><li><a href="/en-US/curriculum/extensions/performance/">4. Performance</a></li><li><em><a href="/en-US/curriculum/extensions/security-and-privacy/" aria-current="page">5. Security and privacy</a></em></li><li><a href="/en-US/curriculum/extensions/testing/">6. Testing</a></li><li><a href="/en-US/curriculum/extensions/a-practical-understanding-of-javascript-frameworks/">7. JavaScript frameworks</a></li><li><a href="/en-US/curriculum/extensions/css-tooling/">8. CSS tooling</a></li><li><a href="/en-US/curriculum/extensions/other-tooling-types/">9. Other tooling types</a></li></ol></details></li><li class=""><a href="/en-US/curriculum/faq/">Frequently asked questions</a></li><li class=""><a href="/en-US/curriculum/resources-for-educators/">Resources for Educators</a></li></ol></aside></div><section class="place side"></section></nav></aside><div class="toc-container"><aside class="toc"><nav><div class="document-toc-container"><section class="document-toc"><header><h2 class="document-toc-heading">In this module</h2></header><ul class="document-toc-list"><li class="document-toc-item "><a class="document-toc-link" href="#5.1_security_and_privacy_basics">5.1 Security and privacy basics</a></li><li class="document-toc-item "><a class="document-toc-link" href="#5.2_data_protection_laws">5.2 Data protection laws</a></li></ul></section></div></nav></aside><section class="place side"></section></div></div><article id="content" class="curriculum-content" lang="en-US"><header><svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 60 60" role="none" class="topic-icon topic-practices"><circle cx="30" cy="30" r="30" fill="#fff"></circle><path fill="#356A1C" d="M35.96 28.42a.5.5 0 0 1-.69 0l-3.861-3.683a.5.5 0 0 1 0-.724l1.11-1.059a.5.5 0 0 1 .69 0l2.06 1.967a.5.5 0 0 0 .69 0l4.813-4.592a.5.5 0 0 1 .69 0l1.11 1.06a.5.5 0 0 1 0 .723zm-7.55-4.17a.5.5 0 0 0-.5-.5H17.12a.5.5 0 0 0-.5.5v1.5a.5.5 0 0 0 .5.5h10.79a.5.5 0 0 0 .5-.5zm12.72 7.862a.5.5 0 0 0 0-.724l-1.109-1.059a.5.5 0 0 0-.69 0l-2.716 2.592a.5.5 0 0 1-.69 0l-2.716-2.592a.5.5 0 0 0-.69 0l-1.11 1.06a.5.5 0 0 0 0 .723l2.648 2.526a.5.5 0 0 1 0 .724l-2.648 2.526a.5.5 0 0 0 0 .724l1.11 1.059a.5.5 0 0 0 .69 0l2.716-2.592a.5.5 0 0 1 .69 0l2.716 2.592a.5.5 0 0 0 .69 0l1.11-1.06a.5.5 0 0 0 0-.723l-2.648-2.526a.5.5 0 0 1 0-.724zM28.41 34.25a.5.5 0 0 0-.5-.5H17.12a.5.5 0 0 0-.5.5v1.5a.5.5 0 0 0 .5.5h10.79a.5.5 0 0 0 .5-.5z"></path></svg><h1>5. Security and privacy</h1><p class="module-topic">Best Practices</p><p class="module-group">Extensions modules</p></header><div class="section-content"><p>It is vital to have an understanding of how you can and should protect your data and your user's data from would-be attackers who may try to steal it. This module covers both hardening websites to make it more difficult to steal data, and collecting user data in a respectful way that avoids tracking them or sharing it with unsuitable third parties.</p> <p class="curriculum-resources">General resources:</p> <ul> <li> <p><a href="/en-US/docs/Web/Privacy">Privacy on the web</a></p> </li> <li class="curriculum-external-li"> <p><a href="https://web.dev/learn/privacy/" class="external" target="_blank">Learn Privacy</a>, web.dev (2023)</p> </li> </ul></div><section aria-labelledby="5.1_security_and_privacy_basics"><h2 id="5.1_security_and_privacy_basics"><a href="#5.1_security_and_privacy_basics">5.1 Security and privacy basics</a></h2><div class="section-content"><blockquote class="curriculum-notes"> <p><strong>Notes</strong>:</p> <ul> <li>Conforming to all of the criteria in this module is not going to result in a student being a qualified security engineer, but equally it is important for web developers to understand the basics of web security and privacy.</li> <li>It is also important for students to understand that a lot of security issues are caused by problems with server-side code, or a combination of client-side and server-side code. A lot of code should present very few security risks, provided the browser is doing its job properly.</li> </ul> </blockquote> <p class="curriculum-outcomes">Learning outcomes:</p> <ul> <li> <p>Understand the difference between security and privacy.</p> </li> <li> <p>Understand the general HTTP model from a high-level.</p> </li> <li> <p>Learn what HTTPS is, and why it is important.</p> </li> <li> <p>Same-origin security:</p> <ul> <li> <p>Why this is fundamental to the web.</p> </li> <li> <p>Ways of working around it safely, such as Cross-Origin Resource Sharing (CORS).</p> </li> </ul> </li> <li> <p>How cookies are stored, and their security and privacy implications, such as tracking.</p> </li> <li> <p>Learn about situations where security issues generally occur:</p> <ul> <li> <p>When asking users to provide sensitive data (such as passwords or credit card data) and transmitting it to a server.</p> </li> <li> <p>When requesting data from a server.</p> </li> <li> <p>When transmitting data between servers (for example, if a server requests data from a web service).</p> </li> <li> <p>When preserving user state by setting a cookie or other mechanisms.</p> </li> </ul> </li> <li> <p>Learn about common security threats and how to mitigate them:</p> <ul> <li> <p>Cross-site scripting (XSS).</p> </li> <li> <p>Cross-site request forgery (CSRF).</p> </li> <li> <p>Clickjacking.</p> </li> <li> <p>Denial of service (DoS).</p> </li> </ul> </li> <li> <p>Understand the purpose of other important technologies, such as:</p> <ul> <li> <p>Content Security Policy (CSP).</p> </li> <li> <p>Permissions-Policy.</p> </li> <li> <p>The web model for user activation of "powerful features" (aka transient activation).</p> </li> </ul> </li> </ul> <p class="curriculum-resources">Resources:</p> <ul> <li> <p><a href="/docs/Web/Security">Security on the web</a></p> </li> <li> <p><a href="/docs/Learn/Server-side/First_steps/Website_security">Website security</a></p> </li> <li> <p><a href="/docs/Web/Privacy">Privacy on the web</a></p> </li> </ul></div></section><section aria-labelledby="5.2_data_protection_laws"><h2 id="5.2_data_protection_laws"><a href="#5.2_data_protection_laws">5.2 Data protection laws</a></h2><div class="section-content"><p class="curriculum-outcomes">Learning outcomes:</p> <ul> <li> <p>Understand fundamental concepts related to user privacy:</p> <ul> <li> <p>Personally identifiable information (PII).</p> </li> <li> <p>Confidentiality.</p> </li> <li> <p>Tracking.</p> </li> <li> <p>Fingerprinting.</p> </li> </ul> </li> <li> <p>Be aware of regional privacy laws, for example:</p> <ul> <li> <p><a href="https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN" class="external" target="_blank">General Data Protection Regulation (GDPR)</a> (EU).</p> </li> <li> <p><a href="https://www.gov.uk/data-protection" class="external" target="_blank">Data Protection Act 2018</a> (UK), gov.uk.</p> </li> <li> <p><a href="https://www.oag.ca.gov/privacy/ccpa" class="external" target="_blank">California Consumer Privacy Act (2018)</a> (US, CA), ca.gov.</p> </li> <li> <p><a href="https://www.ftc.gov/legal-library/browse/rules/childrens-online-privacy-protection-rule-coppa" class="external" target="_blank">Children's Online Privacy Protection Rule (COPPA)</a> (US), ftc.gov.</p> </li> </ul> </li> <li> <p>Understand how to comply with such laws, in terms of practical implementation.</p> </li> </ul> <blockquote class="curriculum-notes"> <p><strong>Notes</strong>:</p> <p>Conforming to the above criteria does not require students to become legal experts in privacy laws, but they should understand the implications of these laws, and how that affects their work.</p> </blockquote> <p class="curriculum-resources">Resources:</p> <ul> <li class="curriculum-external-li"><a href="https://gdpr.eu/" class="external" target="_blank">Complete guide to GDPR compliance</a>, gdpr.eu</li> </ul></div></section><section class="curriculum-prev-next"><a href="/en-US/curriculum/extensions/performance/" target="_self" class="button primary has-icon"><span class="button-wrap"><span class="icon icon-curriculum-prev "></span>Previous: 4. Performance</span></a><a href="/en-US/curriculum/extensions/testing/" target="_self" class="button primary has-icon"><span class="button-wrap"><span class="icon icon-curriculum-next "></span>Next: 6. Testing</span></a></section></article></main></div><footer id="nav-footer" class="page-footer"><div class="page-footer-grid"><div class="page-footer-logo-col"><a href="/" class="mdn-footer-logo" aria-label="MDN homepage"><svg width="48" height="17" viewBox="0 0 48 17" fill="none" xmlns="http://www.w3.org/2000/svg"><title id="mdn-footer-logo-svg">MDN logo</title><path d="M20.04 16.512H15.504V10.416C15.504 9.488 15.344 8.824 15.024 8.424C14.72 8.024 14.264 7.824 13.656 7.824C12.92 7.824 12.384 8.064 12.048 8.544C11.728 9.024 11.568 9.64 11.568 10.392V14.184H13.008V16.512H8.472V10.416C8.472 9.488 8.312 8.824 7.992 8.424C7.688 8.024 7.232 7.824 6.624 7.824C5.872 7.824 5.336 8.064 5.016 8.544C4.696 9.024 4.536 9.64 4.536 10.392V14.184H6.6V16.512H0V14.184H1.44V8.04H0.024V5.688H4.536V7.32C5.224 6.088 6.32 5.472 7.824 5.472C8.608 5.472 9.328 5.664 9.984 6.048C10.64 6.432 11.096 7.016 11.352 7.8C11.992 6.248 13.168 5.472 14.88 5.472C15.856 5.472 16.72 5.776 17.472 6.384C18.224 6.992 18.6 7.936 18.6 9.216V14.184H20.04V16.512Z" fill="currentColor"></path><path d="M33.6714 16.512H29.1354V14.496C28.8314 15.12 28.3834 15.656 27.7914 16.104C27.1994 16.536 26.4154 16.752 25.4394 16.752C24.0154 16.752 22.8954 16.264 22.0794 15.288C21.2634 14.312 20.8554 12.984 20.8554 11.304C20.8554 9.688 21.2554 8.312 22.0554 7.176C22.8554 6.04 24.0634 5.472 25.6794 5.472C26.5594 5.472 27.2794 5.648 27.8394 6C28.3994 6.352 28.8314 6.8 29.1354 7.344V2.352H26.9754V0H32.2314V14.184H33.6714V16.512ZM29.1354 11.04V10.776C29.1354 9.88 28.8954 9.184 28.4154 8.688C27.9514 8.176 27.3674 7.92 26.6634 7.92C25.9754 7.92 25.3674 8.176 24.8394 8.688C24.3274 9.2 24.0714 10.008 24.0714 11.112C24.0714 12.152 24.3114 12.944 24.7914 13.488C25.2714 14.032 25.8394 14.304 26.4954 14.304C27.3114 14.304 27.9514 13.96 28.4154 13.272C28.8954 12.584 29.1354 11.84 29.1354 11.04Z" fill="currentColor"></path><path d="M47.9589 16.512H41.9829V14.184H43.4229V10.416C43.4229 9.488 43.2629 8.824 42.9429 8.424C42.6389 8.024 42.1829 7.824 41.5749 7.824C40.8389 7.824 40.2709 8.056 39.8709 8.52C39.4709 8.968 39.2629 9.56 39.2469 10.296V14.184H40.6869V16.512H34.7109V14.184H36.1509V8.04H34.5909V5.688H39.2469V7.344C39.9669 6.096 41.1269 5.472 42.7269 5.472C43.7509 5.472 44.6389 5.776 45.3909 6.384C46.1429 6.992 46.5189 7.936 46.5189 9.216V14.184H47.9589V16.512Z" fill="currentColor"></path></svg></a><p>Your blueprint for a better internet.</p><ul class="social-icons"><li><a href="https://mozilla.social/@mdn" target="_blank" rel="me noopener noreferrer"><span class="icon icon-mastodon"></span><span class="visually-hidden">MDN on Mastodon</span></a></li><li><a href="https://twitter.com/mozdevnet" target="_blank" rel="noopener noreferrer"><span class="icon icon-twitter-x"></span><span class="visually-hidden">MDN on X (formerly Twitter)</span></a></li><li><a href="https://github.com/mdn/" target="_blank" rel="noopener noreferrer"><span class="icon icon-github-mark-small"></span><span class="visually-hidden">MDN on GitHub</span></a></li><li><a href="/en-US/blog/rss.xml" target="_blank"><span class="icon icon-feed"></span><span class="visually-hidden">MDN Blog RSS Feed</span></a></li></ul></div><div class="page-footer-nav-col-1"><h2 class="footer-nav-heading">MDN</h2><ul class="footer-nav-list"><li class="footer-nav-item"><a href="/en-US/about">About</a></li><li class="footer-nav-item"><a href="/en-US/blog/">Blog</a></li><li class="footer-nav-item"><a href="https://www.mozilla.org/en-US/careers/listings/?team=ProdOps" target="_blank" rel="noopener noreferrer">Careers</a></li><li class="footer-nav-item"><a href="/en-US/advertising">Advertise with us</a></li></ul></div><div class="page-footer-nav-col-2"><h2 class="footer-nav-heading">Support</h2><ul class="footer-nav-list"><li class="footer-nav-item"><a class="footer-nav-link" href="https://support.mozilla.org/products/mdn-plus">Product help</a></li><li class="footer-nav-item"><a class="footer-nav-link" href="/en-US/docs/MDN/Community/Issues">Report an issue</a></li></ul></div><div class="page-footer-nav-col-3"><h2 class="footer-nav-heading">Our communities</h2><ul class="footer-nav-list"><li class="footer-nav-item"><a class="footer-nav-link" href="/en-US/community">MDN Community</a></li><li class="footer-nav-item"><a class="footer-nav-link" href="https://discourse.mozilla.org/c/mdn/236" target="_blank" rel="noopener noreferrer">MDN Forum</a></li><li class="footer-nav-item"><a class="footer-nav-link" href="/discord" target="_blank" rel="noopener noreferrer">MDN Chat</a></li></ul></div><div class="page-footer-nav-col-4"><h2 class="footer-nav-heading">Developers</h2><ul class="footer-nav-list"><li class="footer-nav-item"><a class="footer-nav-link" href="/en-US/docs/Web">Web Technologies</a></li><li class="footer-nav-item"><a class="footer-nav-link" href="/en-US/docs/Learn">Learn Web Development</a></li><li class="footer-nav-item"><a class="footer-nav-link" href="/en-US/plus">MDN Plus</a></li><li class="footer-nav-item"><a href="https://hacks.mozilla.org/" target="_blank" rel="noopener noreferrer">Hacks Blog</a></li></ul></div><div class="page-footer-moz"><a href="https://www.mozilla.org/" class="footer-moz-logo-link" target="_blank" rel="noopener noreferrer"><svg width="112" height="32" fill="none" xmlns="http://www.w3.org/2000/svg"><title id="mozilla-footer-logo-svg">Mozilla logo</title><path d="M41.753 14.218c-2.048 0-3.324 1.522-3.324 4.157 0 2.423 1.119 4.286 3.29 4.286 2.082 0 3.447-1.678 3.447-4.347 0-2.826-1.522-4.096-3.413-4.096Zm54.89 7.044c0 .901.437 1.618 1.645 1.618 1.427 0 2.949-1.024 3.044-3.352-.649-.095-1.365-.185-2.02-.185-1.426-.005-2.668.397-2.668 1.92Z" fill="currentColor"></path><path d="M0 0v32h111.908V0H0Zm32.56 25.426h-5.87v-7.884c0-2.423-.806-3.352-2.39-3.352-1.924 0-2.702 1.365-2.702 3.324v4.868h1.864v3.044h-5.864v-7.884c0-2.423-.806-3.352-2.39-3.352-1.924 0-2.702 1.365-2.702 3.324v4.868h2.669v3.044H6.642v-3.044h1.863v-7.918H6.642V11.42h5.864v2.11c.839-1.489 2.3-2.39 4.252-2.39 2.02 0 3.878.963 4.566 3.01.778-1.862 2.361-3.01 4.566-3.01 2.512 0 4.812 1.522 4.812 4.84v6.402h1.863v3.044h-.005Zm9.036.307c-4.314 0-7.296-2.635-7.296-7.106 0-4.096 2.484-7.481 7.514-7.481s7.481 3.38 7.481 7.29c0 4.472-3.228 7.297-7.699 7.297Zm22.578-.307H51.942l-.403-2.11 7.7-8.846h-4.376l-.621 2.17-2.888-.313.498-4.907h12.294l.313 2.11-7.767 8.852h4.533l.654-2.172 3.167.308-.872 4.908Zm7.99 0h-4.191v-5.03h4.19v5.03Zm0-8.976h-4.191v-5.03h4.19v5.03Zm2.618 8.976 6.054-21.358h3.945l-6.054 21.358h-3.945Zm8.136 0 6.048-21.358h3.945l-6.054 21.358h-3.939Zm21.486.307c-1.863 0-2.887-1.085-3.072-2.792-.805 1.427-2.232 2.792-4.498 2.792-2.02 0-4.314-1.085-4.314-4.006 0-3.447 3.323-4.253 6.518-4.253.778 0 1.584.034 2.3.124v-.465c0-1.427-.034-3.133-2.3-3.133-.84 0-1.488.061-2.143.402l-.453 1.578-3.195-.34.549-3.224c2.45-.996 3.692-1.27 5.992-1.27 3.01 0 5.556 1.55 5.556 4.75v6.083c0 .805.314 1.085.963 1.085.184 0 .375-.034.587-.095l.034 2.11a5.432 5.432 0 0 1-2.524.654Z" fill="currentColor"></path></svg></a><ul class="footer-moz-list"><li class="footer-moz-item"><a href="https://www.mozilla.org/privacy/websites/" class="footer-moz-link" target="_blank" rel="noopener noreferrer">Website Privacy Notice</a></li><li class="footer-moz-item"><a href="https://www.mozilla.org/privacy/websites/#cookies" class="footer-moz-link" target="_blank" rel="noopener noreferrer">Cookies</a></li><li class="footer-moz-item"><a href="https://www.mozilla.org/about/legal/terms/mozilla" class="footer-moz-link" target="_blank" rel="noopener noreferrer">Legal</a></li><li class="footer-moz-item"><a href="https://www.mozilla.org/about/governance/policies/participation/" class="footer-moz-link" target="_blank" rel="noopener noreferrer">Community Participation Guidelines</a></li></ul></div><div class="page-footer-legal"><p id="license" class="page-footer-legal-text">Visit <a href="https://www.mozilla.org" target="_blank" rel="noopener noreferrer">Mozilla Corporation’s</a> not-for-profit parent, the <a target="_blank" rel="noopener noreferrer" href="https://foundation.mozilla.org/">Mozilla Foundation</a>.<br/>Portions of this content are ©1998–2024 by individual mozilla.org contributors. Content available under <a href="/en-US/docs/MDN/Writing_guidelines/Attrib_copyright_license">a Creative Commons license</a>.</p></div></div></footer></div><script type="application/json" id="hydration">{"url":"/en-US/curriculum/extensions/security-and-privacy/","doc":{"locale":"en-US","title":"5. Security and privacy","mdn_url":"/en-US/curriculum/extensions/security-and-privacy/","native":"English (US)","body":[{"type":"prose","value":{"id":null,"title":null,"isH3":false,"content":"<p>It is vital to have an understanding of how you can and should protect your data and your user's data from would-be attackers who may try to steal it. This module covers both hardening websites to make it more difficult to steal data, and collecting user data in a respectful way that avoids tracking them or sharing it with unsuitable third parties.</p>\n<p class=\"curriculum-resources\">General resources:</p>\n<ul>\n <li>\n <p><a href=\"/en-US/docs/Web/Privacy\">Privacy on the web</a></p>\n </li>\n <li class=\"curriculum-external-li\">\n <p><a href=\"https://web.dev/learn/privacy/\" class=\"external\" target=\"_blank\">Learn Privacy</a>, web.dev (2023)</p>\n </li>\n</ul>"}},{"type":"prose","value":{"id":"5.1_security_and_privacy_basics","title":"5.1 Security and privacy basics","isH3":false,"content":"<blockquote class=\"curriculum-notes\">\n <p><strong>Notes</strong>:</p>\n <ul>\n <li>Conforming to all of the criteria in this module is not going to result in a student being a qualified security engineer, but equally it is important for web developers to understand the basics of web security and privacy.</li>\n <li>It is also important for students to understand that a lot of security issues are caused by problems with server-side code, or a combination of client-side and server-side code. A lot of code should present very few security risks, provided the browser is doing its job properly.</li>\n </ul>\n</blockquote>\n<p class=\"curriculum-outcomes\">Learning outcomes:</p>\n<ul>\n <li>\n <p>Understand the difference between security and privacy.</p>\n </li>\n <li>\n <p>Understand the general HTTP model from a high-level.</p>\n </li>\n <li>\n <p>Learn what HTTPS is, and why it is important.</p>\n </li>\n <li>\n <p>Same-origin security:</p>\n <ul>\n <li>\n <p>Why this is fundamental to the web.</p>\n </li>\n <li>\n <p>Ways of working around it safely, such as Cross-Origin Resource Sharing (CORS).</p>\n </li>\n </ul>\n </li>\n <li>\n <p>How cookies are stored, and their security and privacy implications, such as tracking.</p>\n </li>\n <li>\n <p>Learn about situations where security issues generally occur:</p>\n <ul>\n <li>\n <p>When asking users to provide sensitive data (such as passwords or credit card data) and transmitting it to a server.</p>\n </li>\n <li>\n <p>When requesting data from a server.</p>\n </li>\n <li>\n <p>When transmitting data between servers (for example, if a server requests data from a web service).</p>\n </li>\n <li>\n <p>When preserving user state by setting a cookie or other mechanisms.</p>\n </li>\n </ul>\n </li>\n <li>\n <p>Learn about common security threats and how to mitigate them:</p>\n <ul>\n <li>\n <p>Cross-site scripting (XSS).</p>\n </li>\n <li>\n <p>Cross-site request forgery (CSRF).</p>\n </li>\n <li>\n <p>Clickjacking.</p>\n </li>\n <li>\n <p>Denial of service (DoS).</p>\n </li>\n </ul>\n </li>\n <li>\n <p>Understand the purpose of other important technologies, such as:</p>\n <ul>\n <li>\n <p>Content Security Policy (CSP).</p>\n </li>\n <li>\n <p>Permissions-Policy.</p>\n </li>\n <li>\n <p>The web model for user activation of \"powerful features\" (aka transient activation).</p>\n </li>\n </ul>\n </li>\n</ul>\n<p class=\"curriculum-resources\">Resources:</p>\n<ul>\n <li>\n <p><a href=\"/docs/Web/Security\">Security on the web</a></p>\n </li>\n <li>\n <p><a href=\"/docs/Learn/Server-side/First_steps/Website_security\">Website security</a></p>\n </li>\n <li>\n <p><a href=\"/docs/Web/Privacy\">Privacy on the web</a></p>\n </li>\n</ul>"}},{"type":"prose","value":{"id":"5.2_data_protection_laws","title":"5.2 Data protection laws","isH3":false,"content":"<p class=\"curriculum-outcomes\">Learning outcomes:</p>\n<ul>\n <li>\n <p>Understand fundamental concepts related to user privacy:</p>\n <ul>\n <li>\n <p>Personally identifiable information (PII).</p>\n </li>\n <li>\n <p>Confidentiality.</p>\n </li>\n <li>\n <p>Tracking.</p>\n </li>\n <li>\n <p>Fingerprinting.</p>\n </li>\n </ul>\n </li>\n <li>\n <p>Be aware of regional privacy laws, for example:</p>\n <ul>\n <li>\n <p><a href=\"https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN\" class=\"external\" target=\"_blank\">General Data Protection Regulation (GDPR)</a> (EU).</p>\n </li>\n <li>\n <p><a href=\"https://www.gov.uk/data-protection\" class=\"external\" target=\"_blank\">Data Protection Act 2018</a> (UK), gov.uk.</p>\n </li>\n <li>\n <p><a href=\"https://www.oag.ca.gov/privacy/ccpa\" class=\"external\" target=\"_blank\">California Consumer Privacy Act (2018)</a> (US, CA), ca.gov.</p>\n </li>\n <li>\n <p><a href=\"https://www.ftc.gov/legal-library/browse/rules/childrens-online-privacy-protection-rule-coppa\" class=\"external\" target=\"_blank\">Children's Online Privacy Protection Rule (COPPA)</a> (US), ftc.gov.</p>\n </li>\n </ul>\n </li>\n <li>\n <p>Understand how to comply with such laws, in terms of practical implementation.</p>\n </li>\n</ul>\n<blockquote class=\"curriculum-notes\">\n <p><strong>Notes</strong>:</p>\n <p>Conforming to the above criteria does not require students to become legal experts in privacy laws, but they should understand the implications of these laws, and how that affects their work.</p>\n</blockquote>\n<p class=\"curriculum-resources\">Resources:</p>\n<ul>\n <li class=\"curriculum-external-li\"><a href=\"https://gdpr.eu/\" class=\"external\" target=\"_blank\">Complete guide to GDPR compliance</a>, gdpr.eu</li>\n</ul>"}}],"pageTitle":"5. Security and privacy | MDN Curriculum","noIndexing":false,"toc":[{"text":"5.1 Security and privacy basics","id":"5.1_security_and_privacy_basics"},{"text":"5.2 Data protection laws","id":"5.2_data_protection_laws"}],"sidebar":[{"url":"/en-US/curriculum/","slug":"curriculum","title":"MDN Curriculum"},{"url":"/en-US/curriculum/about-curriculum/","slug":"curriculum/about-curriculum","title":"About Curriculum"},{"url":"/en-US/curriculum/getting-started/","slug":"curriculum/getting-started","title":"Getting started modules","children":[{"url":"/en-US/curriculum/getting-started/soft-skills/","slug":"curriculum/getting-started/soft-skills","title":"1. Soft skills"},{"url":"/en-US/curriculum/getting-started/environment-setup/","slug":"curriculum/getting-started/environment-setup","title":"2. Environment setup"}]},{"url":"/en-US/curriculum/core/","slug":"curriculum/core","title":"Core modules","children":[{"url":"/en-US/curriculum/core/web-standards/","slug":"curriculum/core/web-standards","title":"1. Web standards"},{"url":"/en-US/curriculum/core/semantic-html/","slug":"curriculum/core/semantic-html","title":"2. Semantic HTML"},{"url":"/en-US/curriculum/core/css-fundamentals/","slug":"curriculum/core/css-fundamentals","title":"3. CSS fundamentals"},{"url":"/en-US/curriculum/core/css-text-styling/","slug":"curriculum/core/css-text-styling","title":"4. CSS text styling"},{"url":"/en-US/curriculum/core/css-layout/","slug":"curriculum/core/css-layout","title":"5. CSS layout"},{"url":"/en-US/curriculum/core/javascript-fundamentals/","slug":"curriculum/core/javascript-fundamentals","title":"6. JavaScript fundamentals"},{"url":"/en-US/curriculum/core/accessibility/","slug":"curriculum/core/accessibility","title":"7. Accessibility"},{"url":"/en-US/curriculum/core/design-for-developers/","slug":"curriculum/core/design-for-developers","title":"8. Design for developers"},{"url":"/en-US/curriculum/core/version-control/","slug":"curriculum/core/version-control","title":"9. Version control"}]},{"url":"/en-US/curriculum/extensions/","slug":"curriculum/extensions","title":"Extensions modules","children":[{"url":"/en-US/curriculum/extensions/transform-and-animate-css/","slug":"curriculum/extensions/transform-and-animate-css","title":"1. Transform & animate CSS"},{"url":"/en-US/curriculum/extensions/custom-js-objects/","slug":"curriculum/extensions/custom-js-objects","title":"2. Custom JS objects"},{"url":"/en-US/curriculum/extensions/web-apis/","slug":"curriculum/extensions/web-apis","title":"3. Web APIs"},{"url":"/en-US/curriculum/extensions/performance/","slug":"curriculum/extensions/performance","title":"4. Performance"},{"url":"/en-US/curriculum/extensions/security-and-privacy/","slug":"curriculum/extensions/security-and-privacy","title":"5. Security and privacy"},{"url":"/en-US/curriculum/extensions/testing/","slug":"curriculum/extensions/testing","title":"6. Testing"},{"url":"/en-US/curriculum/extensions/a-practical-understanding-of-javascript-frameworks/","slug":"curriculum/extensions/a-practical-understanding-of-javascript-frameworks","title":"7. JavaScript frameworks"},{"url":"/en-US/curriculum/extensions/css-tooling/","slug":"curriculum/extensions/css-tooling","title":"8. CSS tooling"},{"url":"/en-US/curriculum/extensions/other-tooling-types/","slug":"curriculum/extensions/other-tooling-types","title":"9. Other tooling types"}]},{"url":"/en-US/curriculum/faq/","slug":"curriculum/faq","title":"Frequently asked questions"},{"url":"/en-US/curriculum/resources-for-educators/","slug":"curriculum/resources-for-educators","title":"Resources for Educators"}],"prevNext":{"prev":{"url":"/en-US/curriculum/extensions/performance/","title":"4. Performance"},"next":{"url":"/en-US/curriculum/extensions/testing/","title":"6. Testing"}},"parents":[{"uri":"/en-US/curriculum/","title":"MDN Curriculum"},{"uri":"/en-US/curriculum/extensions/","title":"Extensions modules"},{"uri":"/en-US/curriculum/extensions/security-and-privacy/","title":"5. Security and privacy"}],"topic":"Best Practices","group":"Extensions modules","template":"module","summary":"Learn how to protect data from unauthorized access and how to treat user data responsibly."}}</script></body></html>