password

passwordHash

Gain insights into securing Node.js applications: sanitize inputs, use HTTPS, encryption, explore authentication, access control, and protect against XSS, CSRF, and popular hacks.

Working_SNA_Docker.tar.gz

psql

psql-copy

run_spa

run_spa_node

run_spa_hash

compose

compose-copy

compose-copy-copy

run_spa-copy

app-demo-psql

This course is your guide for securing Node.js applications. You'll start by properly sanitizing user input and output, and then move on to some fundamental protocols, such as HTTPS and SHA. Passwords and encryption will be discussed next. More specifically, you will learn about different hashing algorithms and protecting your application from brute force attacks.

Following that, you'll explore concepts like authentication, access control, and obfuscation. You will also learn about XSS, CSRF, and other popular hacks near the end of the course.

By the end of this course, you will know how to secure a Node.js application, an in-demand skill to put on your resume!

A Guide to Securing Node.js Applications

# Base path
Make sure that users are on the HTTPS version of your site whenever needed. This is done in Apache/Nginx configs using redirects. Alternatively, set the base path of your application to use your HTTPS URL: `https://yourApp.com`. Then, force a redirect using the base path if a user enters on HTTP.

Sometimes you want to allow HTTP on certain pages and require HTTPS on others. This is where your web server configs and proper code routing come in.


# Relative paths
Here’s one more tip to make your life easier when using HTTP and HTTPS on one site. URLs for assets, like CSS or JS, can begin with double forward slashes instead of http:// or https:// to reference the current protocol. For example, on your home page, you might have:

```HTML
<link type="text/css" rel="stylesheet" href="//assets/main.css" />
```
Navigating to `https://yourApp.com` loads:

```
https://yourApp.com/assets/main.css
```
Whereas navigating to `http://yourApp.com ` would load:

```
http://yourApp.com/assets/main.css
```

That's just a little trick to make your life a little easier.



Paths

Introduction

Never Trust Your Users. Sanitize ALL Input!

HTTPS and Other Random Letters

Password Encryption and Storage for Everyone

Authentication, Access Control, and Safe File Handling

Safe Defaults, Cross Site Scripting, and Other Popular Hacks

Paths

Base path