Node.js – Page 15 – WindowsTechs.com

Which security vulnerabilities does Sails take care of compared to Express together with middlewares like Helmet, Lusca and Kraken?

Posted on July 12, 2019 by J.Doe.Doe

As I can understand, Sails is built upon Express and has some security features included and a easy implementation of Socket.io. I’ve also read that it is quite unique and could contain a lot of ‘magic’ for beginners. I am pl… Continue reading Which security vulnerabilities does Sails take care of compared to Express together with middlewares like Helmet, Lusca and Kraken?→

How to secure embedded code containing REST api call

Posted on July 11, 2019 by M. Solomonik

I am making a Google Analytics like service where you embed generated code into your website and it tracks certain data. I have a backend REST api, but I am not sure how to securely implement a call to it in the frontend with… Continue reading How to secure embedded code containing REST api call→

Securing a Node.js REST API for React.js webapp as well as a standalone API

Posted on July 9, 2019 by vipulp

I’m trying to create a secure method of authentication for my Node.js REST API that will work both for direct API requests as well as from my React.js web application. I’ve done some reading on how to properly store authentication tokens t… Continue reading Securing a Node.js REST API for React.js webapp as well as a standalone API→

Why sign session cookies? [duplicate]

Posted on July 9, 2019 by TrueWill

This question already has an answer here:

Signing (HMAC) cookie identifier

1 answer

I’m using express-session middleware … Continue reading Why sign session cookies? [duplicate]→

Timing attack – Is safe to check if strings have the same length?

Posted on July 3, 2019 by Bob

In Node, you can use crypto.timingSafeEqual() to check if two strings are equal in a timing-attack safe way. But, they must have the same length, so you have to do something like that:

return stringOne.length === stringTwo.l… Continue reading Timing attack – Is safe to check if strings have the same length?→

How do I get the "vulnerabilities history" of a Node.js package?

Posted on June 25, 2019 by pinas

When installing a Node.js package via npm or when running npm-audit I get information about known vulnerabilities of packages in the project. From my understanding this means that there must be some database somewhere that co… Continue reading How do I get the "vulnerabilities history" of a Node.js package?→

What should I use to encrypt data between a centralized server and multiple devices running NodeJS?

Posted on June 20, 2019 by Rail24

I have a centralized server and DB that each of my devices polls every ten seconds. The centralized server may respond with a list of “active jobs”, which the devices will then run.

I need to ensure the data sent from the se… Continue reading What should I use to encrypt data between a centralized server and multiple devices running NodeJS?→

Potentially unusual open ports on my Mac [on hold]

Posted on June 13, 2019 by portquestion

I did a portscan recently for open ports on my mac and had some slightly unusual results:

I ran sudo lsof -n -i :{port} | grep LISTEN on all of these and got back associations with the following processes:

5432: postgres
… Continue reading Potentially unusual open ports on my Mac [on hold]→

Safe alternative for the `x-forwarded-proto` header?

Posted on May 27, 2019 by Ioanna

I’m trying to redirect all http requests to https for a node.js express server deployed on Heroku.

To that extent, I’m testing the x-forwarded-proto header of the request like this:

app.use(function(req, res, next) {
if… Continue reading Safe alternative for the `x-forwarded-proto` header?→

Auto-Trickler Gently Doles Out Powder to Assist Reloading

Posted on May 2, 2019 by Dan Maloney

Do you even trickle?

[Eric] does, and like everything else about reloading, trickling is serious business. Getting an exact charge of powder to add to a cartridge is not a simple task, and very tedious when done manually. This smartphone-controlled auto-trickler is intended to make the job easier, safer, and …read more

Continue reading Auto-Trickler Gently Doles Out Powder to Assist Reloading→