Secure Your Node.js Web Application

The secret of all victory lies in the organization of the non-obvious.

Marcus Aurelius

Chapter 14Secure the Existing Codebase

Over the course of this book, we discussed various attack methods and how attackers target the weak points in your application. You learned how to protect your application by strengthening those weak points. When you start writing new code, you should now know how to apply everything we’ve discussed so far to avoid making common mistakes. It gives you a starting point to prevent users from becoming victims.

But you don’t always get to start with a brand-new application. Most of the time, you’re working with an existing codebase or using third-party code. By the end of this chapter, you should be able to analyze and ...