Curriculum section

Advanced & Extra

Micro-frontends, PWA, Accessibility, Web Vitals, Security — everything beyond core fundamentals.

33 topics33 detailed guidesInterview-focused explanations

Coverage33Topics in this track, each wired into the same detail-page system.

Depth33Topic guides with structured content sections and analytics-ready detail views.

FocusRealBuilt for actual interview study flow, not decorative curriculum cards.

Next stepPick oneOpen a topic, study deeply, and the analytics layer will start tracking evidence.

Topic library

Choose a topic to continue the section in the same premium learning flow used across the app.

Structured detail pages · mapped metadata

Critical Rendering Path

DOM, CSSOM, Render Tree, Layout, Paint, Composite.

PerformanceBrowser

GoogleMeta

Explore pattern

Web Security (XSS / CSRF / CORS)

Same-origin policy, Content Security Policy, escaping payloads.

SecurityNetwork

StripeCoinbase

Explore pattern

Frontend Accessibility (a11y)

ARIA roles, screen readers, focus management, semantic HTML.

A11YUI/UX

AirbnbApple

Explore pattern

Service Workers & PWA

Offline-first strategies, CacheAPI, IndexDB, push notifications.

OfflinePWA

UberAgoda

Explore pattern

Core Web Vitals Optimization

Deep dive into LCP, FID, INP, and CLS optimization strategies.

PerformanceMetrics

GoogleAirbnb

Explore pattern

HTTP/2 vs HTTP/3 (QUIC)

Multiplexing, Server Push, Head-of-line blocking resolutions.

NetworkProtocols

CloudflareNetflix

Explore pattern

Advanced Browser Storage

IndexedDB vs LocalStorage vs SessionStorage vs Cookies.

StorageState

MetaAmazon

Explore pattern

WebSockets vs SSE vs Long Polling

Real-time communication architectures and scaling connections.

NetworkReal-time

SlackDiscord

Explore pattern

Web Workers & Multithreading

Offloading heavy CPU tasks, postMessage API, SharedWorkers.

MultithreadingPerformance

FigmaCanva

Explore pattern

Browser Rendering Engines

V8, Blink, WebKit internals, Garbage Collection triggers.

BrowserLow-Level

GoogleApple

Explore pattern

Scalable Frontend Architecture

Micro-frontends, Module Federation, Monorepo setups (Turborepo).

ArchitectureSystem Design

UberRippling

Explore pattern

GraphQL vs REST in Enterprise

Over-fetching, Apollo Cache normalization, subscriptions.

NetworkGraphQL

MetaAirbnb

Explore pattern

Authentication Patterns

JWTs, OAuth 2.0, OpenID Connect, Refresh Token rotation.

SecurityAuth

Auth0Stripe

Explore pattern

Finite State Machines (XState)

Eliminating impossible states, visual logic, robust UI flows.

StateArchitecture

NetflixApple

Explore pattern

Evaluating Design Systems

Component libraries, Design Tokens, Headless UI (Radix).

UI/UXScaling

VercelAtlassian

Explore pattern

Frontend Testing Pyramid

E2E (Cypress), Integration (RTL), Unit (Jest) balancing.

TestingQA

AmazonUber

Explore pattern

A/B Testing Implementation

Client-side vs Edge vs Server-side bucketing, flickering issues.

AnalyticsMarketing

AgodaBooking

Explore pattern

Internationalization (i18n)

Right-to-Left (RTL), pluralization, lazy loading dictionaries.

ScaleUX

AirbnbUber

Explore pattern

Canvas & WebGL Basics

hardware acceleration, requestAnimationFrame, game loops.

GraphicsPerformance

FigmaGoogle

Explore pattern

Technical SEO in SPAs

Robots.txt, Sitemaps, dynamic meta tags, crawler behaviors.

Chrome Memory tab, Retained Size vs Shallow Size, Detached DOMs.

When to use Rust/C++, Interop speeds, use cases.

Low-LevelFuture

FigmaZoom

Explore pattern

Advanced CI/CD Pipelines

Lighthouse CI, PR preview environments, visual regression.

DevOpsInfrastructure

VercelGitLab

Explore pattern

Error & Tracing (Sentry/Datadog)

Source maps, generic error swallowing, user session replays.

ObservabilityReliability

StripeSlack

Explore pattern

Native Web Components

Shadow DOM, Custom Elements, HTML Templates, lit-html.

StandardsUI

SalesforceGoogle

Explore pattern

.env in Frontend — Build-Time Secrets

Why .env is config management not security. Build-time injection, exposed bundles, public vs private keys.

SecurityConfigBuild

VercelStripeGoogle

Explore pattern

Public vs Private Config

What belongs in client bundles vs server-only env. NEXT_PUBLIC_ prefix, runtime injection, secret boundaries.

SecurityConfigArchitecture

VercelStripeAmazon

Explore pattern

API Keys & Secret Boundaries

Publishable vs secret keys, proxy patterns, server-side gating. Why frontend API keys are not secrets.

SecurityAPIArchitecture

StripeGoogleCoinbase

Explore pattern

Cookie Flags — HttpOnly, Secure, SameSite

Every flag explained: HttpOnly blocks JS access, Secure enforces HTTPS, SameSite controls cross-origin. Interview-critical.

SecurityCookiesAuth

GoogleMetaStripeAmazon

Explore pattern

Cookies vs Authorization Header

When the browser sends credentials automatically vs when you attach them manually. CSRF implications of each.

SecurityAuthNetwork

StripeGoogleMeta

Explore pattern

localStorage Security Risks

Why storing tokens in localStorage is an XSS target. Real attack scenarios, migration strategies to httpOnly cookies.

SecurityStorageXSS

MetaStripeCoinbase

Explore pattern

CORS — Complete Deep Dive

Same-Origin Policy, preflight requests, Access-Control headers, credentials mode. Why CORS blocks responses not requests.

SecurityNetworkBrowser

GoogleAmazonStripe

Explore pattern

Refresh Token Flow — Complete Guide

Access vs refresh tokens, silent refresh, token rotation, expiry strategy. Preventing infinite refresh loops.

SecurityAuthTokens

Auth0StripeGoogleMeta

Explore pattern