> Markdown version of [Advanced Security Topics](https://vaadin.com/docs/next/flow/security/advanced-topics). Section index: [llms.txt](https://vaadin.com/docs/next/flow/llms.txt)

# Advanced Security Topics

- [Security Architecture](https://vaadin.com/docs/next/flow/security/advanced-topics/architecture.md): An introduction to Vaadin Flow's security architecture and how it works in practice.
- [Security Practices at Vaadin](https://vaadin.com/docs/next/flow/security/advanced-topics/security-practices.md): Provides an overview of the steps Vaadin takes to ensure an application remains secure.
- [Common Vulnerabilities](https://vaadin.com/docs/next/flow/security/advanced-topics/vulnerabilities.md): Descriptions of common vulnerabilities such as SQL injections, cross-site request forgeries, cross-site scripting.
- [Frequently Reported Issues](https://vaadin.com/docs/next/flow/security/advanced-topics/frequent-issues.md): Lists perceived issues reported by users as vulnerabilities.
- [Securing Plain Java Applications](https://vaadin.com/docs/next/flow/security/advanced-topics/securing-plain-java-app.md): Details and examples on using the built-in security helpers in a Java application.
- [Navigation Access Control](https://vaadin.com/docs/next/flow/security/advanced-topics/navigation-access-control.md): Explains navigation access control and how it can be customized.
- [Storing Sensitive Data](https://vaadin.com/docs/next/flow/security/advanced-topics/external-configuration.md): Advice on storing sensitive data in Spring Boot applications.
- [Content Security Policy](https://vaadin.com/docs/next/flow/security/advanced-topics/strict-csp.md): How to enable strict Content Security Policy.