XSS prevention, CSRF protection, content security policies, mobile app security, and secure storage patterns