The Security Toolbox For Node
summary
Covers concrete defenses: demonstrates OWASP Top 10 coverage using the NodeGoat examples and cites that those flaws exist in ~85% of web apps; shows package hygiene with npm audit / npm audit fix and npm outdated, and recommends two‑factor and read‑only tokens for npm. Names validator.js, helmet.js, crypto-js, express-rate-limit and csurf for input validation, headers, encryption, rate limiting and CSRF protection, and points to Kali for attacker tooling so implementations can be tested.
AI-written summary · about
chapters (12)
- 0:00Intro
- 0:58Overview
- 3:56Cross-site scripting
- 6:13Denial of Service
- 7:56Server-side injection
- 10:02Maintain dependencies
- 12:50Your npm packages
- 15:01Validate and assert types
- 16:41Requests and responses
- 17:25Handling user data
- 19:05Rate-limiting
- 19:32Cross-site request forgery
