Category Archives: Node.js

JavaScript injection minimal example using node/express not working: <script> not executed [duplicate]

Posted on by

I want to create a minimal example where JavaScript injection/XSS is working. This is my example server:

const express = require("express");
const path = require("path");

const app = express();
const port = 3000;

app… Continue reading JavaScript injection minimal example using node/express not working: <script> not executed [duplicate]→

Uploading sensitive data, Should I user memoryStorage (buffer) or save and delete file?

Posted on by

I need to save very sensitive data from an Excelfile that the user uploads. The data will then be saved to mySQL. All is done in Node.js.
Now I wonder what is the most secure way to upload the file.
Should I use Multer (https://expressjs.c… Continue reading Uploading sensitive data, Should I user memoryStorage (buffer) or save and delete file?→

Is sending a Post from a node-je/electron app vulnerable to a man in the middle attack even if it is to an https website? [duplicate]

Posted on by

I have an app which sends a user-email and a password to a server for verification using a post request:
$.post(server_url,{
email: user_email,
password: user_password,
action: requested_action_on_server
}, function(result){
/… Continue reading Is sending a Post from a node-je/electron app vulnerable to a man in the middle attack even if it is to an https website? [duplicate]→

How to properly invalidate JWT tokens and sessions in this use case?

Posted on by

I am building a web app, which is made of a Node.js Backend and Angular (NOT AngularJS!!! I only used the tag, because Angular was not available..) Frontend.
How do I properly secure this app? I already have an idea to use JWT tokens (I al… Continue reading How to properly invalidate JWT tokens and sessions in this use case?→