- https://blog.risingstack.com/node-js-security-checklist/
- https://blog.risingstack.com/node-js-security-tips/
- https://nemethgergely.com/nodejs-security-overview/
- Use Helmet.js
- Cast string to String when using JSON object from body
- Regulary Expression DDOS
- Use "Validator.js" to validate string
- Safe-regex
- Snyk or Yarn for dependencies
- https://duo.com/blog/hunting-malicious-npm-packages
- https://docs.npmjs.com/cli/shrinkwrap
- https://docs.npmjs.com/files/package-locks
- Check headers http://cyh.herokuapp.com/cyh
- Always use "use strict"
- Use "ParseInt" or "ParsetFloat" with base 10
- Use strict comparisons "==="