Testing NodeJS Security
summary
Covers security practices for Node.js (especially Express) applications, focusing on authentication, middleware configuration, and production best practices. Reviews the state of Node.js security, common vulnerabilities demonstrated via the OWASP NodeGoat project, and tools/techniques to defend against issues like SQL injection and XSS.
AI-written summary · about
chapters (11)
- 0:00Intro
- 1:31Node.js introduction
- 2:32Security updates
- 4:02Latest vulnerabilities
- 7:43Helmet module
- 10:18Express versions
- 11:24Sessions management
- 20:05Regular expressions
- 28:56Node Goat
- 35:39Tools
- 38:56Project dependencies
related talks
56mNode.js Security
21mThe Security Toolbox For Node
35mSecure development in NodeJS: OWASP top ten and JWT best practices
32mOWASP Top 10 Vulnerabilities in Node.js
27mState of Node.js Security
55mNode.js Security: Breaking The Loop
38mThe Security Toolbox For Node- 32mOWASP Top 10 Vulnerabilities in Node.js