Deep dives by topic: formulas, assumptions, common mistakes and worked examples.
CSP, HSTS, nosniff, frame, referrer, permissions.
Block XSS reads, HTTPS-only and cross-site sending policy.