Overview
Syllabus
Intro
TOP 2 VULNERABILITIES
BUG FIXING COST
UNVALIDATED REDIRECTS AND FORWARDS
USING COMPONENTS WITH KNOWN VULNERABILITIES
HOW TO CHOOSE NPM PACKAGES?
CROSS-SITE REQUEST FORGERY (CSRF)
MISSING FUNCTION LEVEL ACCESS CONTROL
SENSITIVE DATA EXPOSURE
CAN I PREVENT SNIFFING?
JAVASCRIPT CRYPTOGRAPHY
SECURITY MISCONFIGURATION
INSECURE DIRECT OBJECT REFERENCES
CROSS-SITE SCRIPTING (XSS)
NODE.JS AUTHENTICATION
NODE.JS ACCESS CONTROL
SESSIONS
SECURE PASSWORDS STORAGE
JAVASCRIPT INJECTION
COMMAND INJECTION
FILE UPLOAD SECURITY
TRY IT YOURSELF
QUESTIONS?
Taught by
NDC Conferences