Javascript Checklists

Platforms

• ExpressJS Pre-flight Checklist
• NodeJS Checklist

Secure Coding Practices

Avoid stringify()

The command JSON.stringify() is not safe and can lead to XSS attacks.

Instead, use serialize-javascript:

$npm install --save-dev serialize-javascript

• View on GitHub
• Security risk details

Resources & Advisories

https://medium.com/node-security