# Security Features

- [Overview](/docs/v9/security-features/overview.md): How oidc-spa mitigates the risks of token exposure
- [Browser Runtime Freeze](/docs/v9/security-features/browser-runtime-freeze.md): Ensuring the integrity of the browser runtime environment.
- [DPoP](/docs/v9/security-features/dpop.md): OAuth 2.0 Demonstrating Proof-of-Possession
- [Token Substitution](/docs/v9/security-features/token-substitution.md)