9
Dealing with Security
Throughout this book, we’ve learned how we can use Node.js to build applications. As with all software, you must take certain precautions to ensure the application you’re building is secure.
First, you should ensure that you’ve adopted any Node.js releases that contain security fixes. For this reason, where possible, you should aim to be on the latest release of a given Node.js release line.
This chapter will cover some of the key aspects of Node.js web application security. The later recipes demonstrate some of the common attacks on web applications, including cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. They will showcase how to prevent and mitigate the risk of some of these attacks.
This ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access