Implement Access Control in Node.js

Most web applications rely on some sort of access control to keep users from accessing…

What I learned from analysing 1.65M versions of Node.js modules in NPM

NPM and open source modules are one of Node.js’ greatest strengths — and also one of it’s greatest weaknesses. took it upon myself to explore how the NPM really works on a granular level and at scale. It…

Set Up a Secure Node.js Web Application

Every application has to live somewhere — a server, a phone, a device — an environment. Before we start worrying if we have used secure coding practises and avoided common mistakes we must secure the foundation of our application otherwise all our effort in…

What do you know about Clickjacking?

Clickjacking, also known as a “UI redress attack”, is an attack vector where multiple transparent or opaque layers are used to trick a user into clicking on a button or link on different page than visually seen by the user. Thus, the attacker is “hijacking” clicks…

Unvalidated Redirects

Every so often, the web application you write will need to redirect the user based on the current situation. Most often this comes up when you redirect the user to a login page and if the login is successful, redirect them back. Sounds familiar?

Security IS a Part of Your Job

It’s 2016 and the web is everywhere — our apps run our jobs, phones…