The main content of web front end work, what skills need to be mastered

Check out the front-end application library? Recommended 3D visualization libraries, such as ThingJS, are all WebGL-based 3D frameworks, but if you don't want to spend more time learning 3D expertise, and want to do a 3D project as soon as possible, recommend ThingJS, which is a unicorn in the field of 3D visualization of the Internet of Things. It is estimated that you need to improve your technical application level, so you can do a 3D project and absorb knowledge from practical operations.

1. Common attack methods in the web.

Injection --- a common security issue.

Solution: The front-end page needs to verify the user's input data (limiting the type, scope, format, and length of the user's input), and cannot only rely on the back-end to verify the user's data. First, it can improve the efficiency of back-end processing, and second, it can improve the security of back-end data.

The backend does not use dynamic SQL statements, but uses stored procedure query statements. Restrict user access to the database. When the backend accepts data from the frontend, it needs to filter some special characters (such as "-" characters).

If there is an exception on the backend, use a custom error page to prevent users from finding server vulnerabilities through the server's default error page.

Attacks --- relatively complex security issues.

Attack method: DOM-based XSS is to run JS scripts directly through the browser, without submitting to the server, caused by the client's **.

A storage XSS attack is an attack that is caused by submitting a JS script through an input box or uploading a file to the server from the database.

A reflection XSS attack is an attack that submits a JS script to the server through a URL and initiates an attack from the victim's request.

Attacks --- more dangerous security issues than XSS attacks.

Attack method: The victim opens **a, logs in**a, **a saves some cookies locally (without closing the browser), and the victim opens **b, **b saves some malicious cookies, and sends the victim's request to **a (**b uses the victim to attack**a).

Attacks --- common and devastating security issues (DDoS attacks in the case of distributed attacks).

Attack method: Ping flood attack uses the ping command to continuously send packets to the server.

Cache pollution --- a common** inaccessible problem.

Attack method: A trusted third-party name server caches some DNS resolutions, but some fake name servers are created by others to envelope and defile.

There are 8 aspects of knowledge that the web front-end needs to master, you can learn in the order of the front-end roadmap, and focus on the reputation of the institution when choosing a front-end training institution.

Front-end learning roadmaps.

The front-end prospect is very good, a major like the front-end is still better in a first-tier city, the faculty can keep up, the salary of employment is also considerable, and the learning front-end can be in the order of the roadmap

1. Entry-level.

Make pages. It's as simple as that. Convert all kinds of design drawings from the designer into static web pages of html+css+js+image, and hand them over to the back-end developer to make page templates.

That's what entry-level front-end engineers do.

2. The stool is nucleated into the class.

Or do the page. But to get a little more complicated, you'll need to start paying attention to some more complex issues, starting with browser compatibility. To be honest, the browser compatibility problem is really not so easy to solve, after all, each project has different requirements for browser versions, and now there are not only PC browsers but also browsers on various mobile devices, and at the same time, there are more and more browser types of domestic manufacturers, and the pit is also dense.

In addition to compatibility, you may also need to pay attention to performance issues, including but not limited to mesh mining performance, rendering performance, JS logic performance, etc., which can be written in this booklet.

3. Intermediate. With a team. You may wonder how a mid-level engineer can lead a team?

But that's really the case with a lot of companies, especially small ones. Once you've learned the details of HTML, JS, CSS, and the various features of various browsers, you'll be appointed to lead a small development team, of course, a front-end development team. Maybe there are only three or four people in total, or even less.

At this time, in addition to writing a little bit of the page yourself, you will also help the group members solve all kinds of detailed problems, after all, you are the most knowledgeable about technical details in the group. At this time, some people began to stagnate, while others began to focus on another new problem: engineering.

The front-end ** is very loose, the project structure is poor, once the number of developers increases, the business becomes complex, how to manage so many people, so many ** is a very big problem. Whether or not you can make a breakthrough on this issue determines whether you can move to the next level.

4. Advanced. Architectural design. At this time, you are familiar with the technical details of front-end development, and at the same time, you are familiar with the characteristics of various front-end frameworks and technologies, you know how to organize and manage projects so that everyone can meet the project requirements as quickly as possible, and you even know the strengths and weaknesses of everyone under you.

Therefore, IT training found that when a new project arrives, you quickly select a number of technologies and tools based on your past experience, and match them with the most suitable person you think to form a project team. After doing this for a project or two, you may feel empty again and you need to seek new goals. It just so happens that nodejs opens the door to a new world.

1. Adobe Photoshop

Adobe Photoshop (PS) is a basic drawing tool, which is used to process bitmap software, retouching, compositing, etc. PS mainly processes digital images (i.e., bitmap images) made up of pixels. PS has a lot of functions, which are involved in all aspects such as images, graphics, text, **, publishing, etc.

Under normal circumstances, there is no problem in making posters, roll-up banners, business cards, albums, etc.

2. Adobe Illustrator

Adobe Illustrator (AI) is also a basic must-have, because it has a wide range of uses and a lot of materials, such as graphic production and typesetting.

Illustrator translates to "illustrator" in English. It is one of the indispensable creative software for illustrators. Of course, in the field of graphic design, we often use its powerful and convenient graphic processing capabilities to carry out logo design, pattern graphic design, font design, etc.

3. CorelDraw

Easy to use CorelDraw, this software provides designers with graphic illustration, page layout, web design and other design scenarios.

Corel's positioning of itself is professional vector graphics, which is the same as Illustrator's positioning. Logo design, album layout, and graphic processing can all be easily handled with CDR.

4. Adobe InDesign

Adobe InDesign(ID) typesetting software, very fast, very easy to use. If you want to become a graphic designer, in addition to your own efforts, you need to work hard for professional training, and you also need project practice. This will help you achieve your goals better.

5. AutoCAD

AutoCAD is an automatic computer-aided design software first developed by Autodesk in 1982, which is used for 2D drawing, detailed drawing, design documentation and basic 3D design.

AutoCAD can draw arbitrary two-dimensional and three-dimensional graphics, and compared with traditional manual drawing, drawing with AutoCAD is faster, more accurate, and convenient for individuality, mainly used in civil engineering, decoration, industrial drawing, engineering drawing, electronic industry, clothing processing and other fields.