When will you use this?

Use advanced routing when one URL needs multiple panels, modals, or loading states.

• Parallel routes show a video player and notes panel on the same lesson URL.
• Intercepting routes open a course preview modal without leaving the catalog page.

Real-world: Practo-style clinic portal

The Healthcare team building Practo-style clinic portal uses XSS and CSRF Protection to apply XSS and CSRF Protection when building appointment booking and medical records UI. patients and doctors never see the TypeScript files — they just get a fast, reliable appointment booking and medical records UI.

Production-style code

// app/example/[id]/page.tsx
export default async function Page({ params }: { params: Promise<{ id: string }> }) {
  const { id } = await params;
  return <p>XSS and CSRF Protection: {id}</p>;
}

What happens in production: In Practo-style clinic portal, getting XSS and CSRF Protection right means patients and doctors trust the appointment booking and medical records UI every day.

Lesson example (start here)

Copy this smaller example first. Once it works, compare it with the real-world code above.

// app/example/[id]/page.tsx
export default async function Page({ params }: { params: Promise<{ id: string }> }) {
  const { id } = await params;
  return <p>XSS and CSRF Protection: {id}</p>;
}

Line-by-line walkthrough

How it works (big picture)

• Study the example line by line.
• Each part connects to XSS and CSRF Protection.
• Edit one line, save, run npm run dev, and see what changes.

Do this on your computer

1. Read when to use this vs simpler routing.
2. Try the minimal example in a branch.
3. Document one LearnHub screen that would need it.
4. Read the real-world section and name which part of LearnHub uses this topic.
5. Run the example locally with npm run dev and confirm the same behavior.
6. Change one value in the example (route, text, or course id) and predict what will happen before you save.

Experiments — try changing this

• Change a string or route in the example and save — watch the browser update.
• Break the code on purpose (remove a bracket), read the error overlay, then fix it.
• Change the API URL or course id and see how the page data changes.
• Use npm run dev while editing XSS and CSRF Protection — the page hot-reloads on save.

Remember

You learned what XSS and CSRF Protection is and when to use it in LearnHub. Practice by changing the example yourself. Use the Next link when you can explain it in your own words.

Common questions