shankscript
/ Node.js Security Checklist
Created
March 26, 2018 18:06
— forked from gaboesquivel/Node.js Security Checklist
API Checklists
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Security - the elephant in the room. Everyone agrees that it is very important but few takes it seriously. We at RisingStack want you to do it right - this is why we have put together this checklist to help you guide through the must have security checks before your application is enabled to thousands of users/customers. | |
| Most of these items are general and applies to all languages and frameworks not just Node.js - however some of the tools presented are Node.js specific. You should also check our introductory Node.js security blogpost. | |
| Configuration Management | |
| Security HTTP Headers | |
| There are some security-related HTTP headers that your site should set. These headers are: |