The Security Toolbox For Node
summary
Covers the OASP top 10 with a concrete claim that ~60% of sites are vulnerable and drills into fixes: mandatory input validation, using json.parse instead of eval, schema typing, and concrete package hygiene via npm audit and npm outdated. Demonstrates quick defenses—helmet JS headers, cryptojs encryption, Express rate limiting, csurf for CSRF, HTTPS—and warns about unmaintained deps and regex DoS while showing which tools and commands to run now.
AI-written summary · about
chapters (13)
- 0:00Start
- 2:08Overview
- 4:36Cross-site scripting
- 8:07Denial of Service
- 12:29Server-side injection
- 16:14Maintain dependencies
- 18:22Your npm packages
- 19:40Validate and assert types
- 22:05Requests and responses
- 23:21Handling user data
- 25:19Rate-limiting
- 26:04Cross-site request forgery
- 28:06Use the tools that are out there
