A Guide to Securing Node.js Applications

Takeaway Skills

Sanitize user input and output.

Understand and implement HTTPS.

Create secure hashes using random salts.

Implement access control with authentication.

Protect yourself against XSS and CSRF.

Sanitize user input and output.

Understand and implement HTTPS.

Create secure hashes using random salts.

Implement access control with authentication.

Protect yourself against XSS and CSRF.

Course Overview

This course is your guide for securing Node.js applications. You'll start by properly sanitizing user input and output, and then move on to some fundamental protocols, such as HTTPS and SHA. Passwords and encryption will be discussed next. More specifically, you will learn about differ... See More

How You'll Learn

Hands-on coding environments

You don’t get better at swimming by watching others. Coding is no different. Practice as you learn with live code environments inside your browser.

Faster than videos

Videos are holding you back. The average video tutorial is spoken at 150 words per minute, while you can read at 250. That‘s why our courses are text-based.

No set-up required

Start learning immediately instead of fiddling with SDKs and IDEs. It‘s all on the cloud.

Progress you can show

Built in assessments let you test your skills. Completion certificates let you show them off.

Hands-on coding environments

You don’t get better at swimming by watching others. Coding is no different. Practice as you learn with live code environments inside your browser.

Faster than videos

Videos are holding you back. The average video tutorial is spoken at 150 words per minute, while you can read at 250. That‘s why our courses are text-based.

No set-up required

Start learning immediately instead of fiddling with SDKs and IDEs. It‘s all on the cloud.

Progress you can show

Built in assessments let you test your skills. Completion certificates let you show them off.

Course Contents

Hide All

Hide All Lessons

1. Introduction

Who Is This Course For?

About the Course

2. Never Trust Your Users. Sanitize ALL Input!

SQL Injection

How to Guard Against SQL Injection

Mass Assignment

Typecasting

Sanitizing Output

Quiz Yourself on Input/Output Basics

3. HTTPS and Other Random Letters

Introduction

Limitations of HTTPS

Implementing HTTPS

Apache and Nginx setup

Paths

Quiz Yourself on HTTPS

4. Password Encryption and Storage for Everyone

Introduction

Hashes

A Pinch of Salt

Hashing Algorithms

Storage and Validation

Putting It All Together

Brute Force Protection

Upgrading Legacy Systems

Quiz Yourself on Encryption

5. Authentication, Access Control, and Safe File Handling

Introduction

Access Control

Routes and Redirects

Obfuscation

Safe File Handling

Quiz Yourself on Authentication

6. Safe Defaults, Cross Site Scripting, and Other Popular Hacks

Never Trust Yourself

Cross-Site Scripting

Cross Site Request Forgery

Race Conditions

Outdated Libraries

Quiz Yourself on Popular Hacks

Thank You!