The Node.js Secure Coding Blog

The Case for Node.js Secure Configuration

How do you maintain Node.js secure configuration? Learn how to protect your Node.js applications from vulnerabilities and unauthorized access.

Protecting Against Common Node.js Vulnerabilities

Node.js applications can be vulnerable to issues like command injection, path traversal, and insecure APIs. Learn how to avoid these common Node.js security pitfalls.

Input Validation Security Best Practices for Node.js

Building secure node.js applications starts with applying essential input validation best practices and techniques to prevent common security vulnerabilities.

A Node.js Vulnerability Scanner to Avoid Security Risks of EOL Runtime Versions

Don't let vulnerabilities slow you down: Introducing is-my-node-vulnerable, the Node.js vulnerability scanner. Securing your Node.js applications in production is crucial. This blog post explores is-my-node-vulnerable, a free and easy-to-use scanner developed by Node.js expert Rafael Gonzaga.

JavaScript Security Issues in Node.js Applications

Introducing JavaScript security issues in Node.js applications such as Cross-site Scripting (XSS) and Content Security Policy (CSP).

OWASP Node.js Authentication, Authorization and Cryptography Practices

Properly implementing authentication and authorization is crucial for securing Node.js apps. This section covers guidelines like proper session management, password hashing, and attack prevention.