password

passwordHash

Gain insights into securing Node.js applications: sanitize inputs, use HTTPS, encryption, explore authentication, access control, and protect against XSS, CSRF, and popular hacks.

Working_SNA_Docker.tar.gz

psql

psql-copy

run_spa

run_spa_node

run_spa_hash

compose

compose-copy

compose-copy-copy

run_spa-copy

app-demo-psql

This course is your guide for securing Node.js applications. You'll start by properly sanitizing user input and output, and then move on to some fundamental protocols, such as HTTPS and SHA. Passwords and encryption will be discussed next. More specifically, you will learn about different hashing algorithms and protecting your application from brute force attacks.

Following that, you'll explore concepts like authentication, access control, and obfuscation. You will also learn about XSS, CSRF, and other popular hacks near the end of the course.

By the end of this course, you will know how to secure a Node.js application, an in-demand skill to put on your resume!

A Guide to Securing Node.js Applications

# External programs and libraries
Another quick item to discuss is outdated libraries/packages. This is particularly problematic with JavaScript because our community is dependent upon utilizing many small packages for most applications. The best way to ensure safe code is to keep all dependencies up to date. No matter how secure your code is, it only takes a single security vulnerability in a single library, and your site can be exploited.

Keep in mind the external programs used on your server. For example, throughout its lifetime, PhpMyAdmin had several security flaws that left servers vulnerable. Outdated WordPress installations are a back door for hackers. Any program that exposes critical functions on your server is a possible attack entry point.

Try to keep your external dependencies to a minimum. Always keep them up-to-date with their latest security releases.


# Updating dependencies with npm
You can check for outdated dependencies using the `npm outdated` command. This returns a list of all outdated dependencies along with the current, wanted, and available versions. Run the `npm outdated` command in the terminal below.

Learn how outdated libraries can cause security issues.

Introduction

Never Trust Your Users. Sanitize ALL Input!

HTTPS and Other Random Letters

Password Encryption and Storage for Everyone

Authentication, Access Control, and Safe File Handling

Safe Defaults, Cross Site Scripting, and Other Popular Hacks

Outdated Libraries

External programs and libraries