Module 2: Programming for the Web

8 dot points across 2 inquiry questions, in syllabus order. Each dot point has a focused answer, with exam-style questions and worked answers where available.

Inquiry Question 1: How are secure web applications developed?

Identify and mitigate cross-site scripting (XSS), cross-site request forgery (CSRF) and SQL injection vulnerabilities

Web vulnerabilities. XSS (stored and reflected), CSRF, SQL injection, mitigations for each, the worked example, and the traps markers look for.

6 min read →

Explain the HTTP protocol, including request methods, status codes and headers, and the role of HTTPS in securing web traffic

HTTP. Request methods, status codes, headers, the role of HTTPS and TLS, the worked example, and the traps markers look for.

5 min read →

Describe the client-server architecture of the web, including the roles of the browser, web server, application server and database

Web architecture. Browser, web server, application server, database, the request-response cycle, the worked three-tier example, and the traps markers look for.

5 min read →

Implement server-side programming, including routing, handling requests, generating responses and integrating with a database

Server-side programming. Routing, handlers, response building, database integration, the worked Flask example, and the traps markers look for.

6 min read →

Design a relational database schema and write SQL statements to create tables, insert data, query with joins, and update or delete rows

Relational databases. Schema design, primary and foreign keys, SELECT with JOIN, INSERT, UPDATE, DELETE, the worked example, and the traps markers look for.

7 min read →

Inquiry Question 2: How can data be better visualised using a web browser?

Construct front-end pages using HTML for structure and CSS for presentation, including semantic markup and responsive design

HTML and CSS. Semantic markup, the box model, responsive design with media queries, the worked example, and the traps markers look for.

5 min read →

Use JavaScript in the browser to manipulate the DOM, handle events and make asynchronous requests

Client-side JavaScript. DOM manipulation, event handlers, fetch and async/await, the worked example, and the traps markers look for.

5 min read →

Design and consume RESTful APIs that exchange JSON, including resource modelling, request methods and status codes

REST APIs. Resource modelling, JSON, HTTP methods mapped to CRUD, status codes, the worked example, and the traps markers look for.

5 min read →