Trainer for Secure UI5 & CAP/CDS Development

Project overview

We are looking for an experienced trainer for a one-day intensive developer training on secure coding in the SAP environment. The training imparts best practices for secure UI5 and CAP/CDS development and is aimed at developers who want to deepen their security skills.

The training program includes five modules:

Module 1 covers the UI5 attack surface and shows how attackers analyze apps. Participants learn to use browser dev tools and UI5 diagnostic tools and learn how to protect sensitive data and secure configuration files.

Module 2 focuses on client-side security and XSS prevention. Practical exercises demonstrate common security vulnerabilities in custom controls, while defense strategies teach secure escaping and content security policies.

Module 3 imparts the Zero Trust principle for APIs and CDS services. Here, developers learn that the frontend is not a security barrier and how CAP services are protected through declarative access control and role-based security.

Module 4 covers session, token, and context management, including CSRF protection and JWT validation. Practical scenarios show how to prevent unauthorized API calls.

Module 5 imparts best practices and tooling for everyday development, especially the integration of security linters into CI/CD processes.

The training is conducted remotely and combines theoretical foundations with practice-oriented hands-on exercises. Ideal for developers who want to expand their security skills in the SAP ecosystem.

Project details

• Start: asap
• Duration: 1 Tag
• Remote: onsite
• Location: DE
• Languages: German