The Security Toolbox for Node

Explore the top 10 security threats to Node applications and learn effective countermeasures in this 21-minute conference talk from Node Congress 2021. Discover a comprehensive security toolbox for Node.js, covering crucial areas such as securing dependencies, data protection, and server security. Learn how to implement quick security checks across multiple repositories, prepare for various attacks, and integrate security measures without compromising sprint deadlines. Gain practical insights on handling cross-site scripting, denial of service attacks, server-side injections, and more. Walk away with the knowledge to maintain secure dependencies, validate data types, manage user information safely, implement rate-limiting, and prevent cross-site request forgery.

Intro
Overview
Cross-site scripting
Denial of Service
Server-side injection
Maintain dependencies
Your npm packages
Validate and assert types
Requests and responses
Handling user data
Rate-limiting
Cross-site request forgery