Node.js Application Insecurity - OWASP AppSec California 2015

Node.js Application Insecurity - OWASP AppSec California 2015

Explore Node.js application security vulnerabilities and best practices in this OWASP AppSec California 2015 conference talk. Dive into various security categories, including cross-site scripting, code escaping, and query language vulnerabilities. Learn about the importance of prepared statements, proper header usage, and the dangers of eval() functions. Examine GitHub examples, tips for generating secure random numbers, and potential issues with the Buffer class. Gain insights into common pitfalls, such as buffer overflows and allocation problems, to enhance your Node.js application security knowledge.