NodeJS Security Best Practices

• body-parser

  7 5,381 0.0 JavaScript

  Node.js body parsing middleware

  

Using body-parser you can set the limit on the size of the payload

• nodejs-logging-for-production

  2 4 1.8 TypeScript

  How to setup Logging for Production Grade NodeJS applicaiton

• SurveyJS

  surveyjs.io sponsored

  Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App. With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.

  

• nodejs-environment-handling

  2 3 1.8 TypeScript

  Handle Multiple Environments in NodeJS

• understanding-csrf

  3 1,374 10.0

  What are CSRF tokens and how do they work?

  

To learn more about CSRF. Go here Consider using csurf

• nodejs-expressjs-error-handling

  2 5 2.6 TypeScript

  NodeJS error handling demo

• csurf

  5 2,294 4.7 JavaScript

  Discontinued CSRF token middleware

  

To learn more about CSRF. Go here Consider using csurf

• nodejs-security-best-practices

  1 7 - TypeScript

  How to create a secured NodeJS application

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• TypeORM

  156 33,287 9.0 TypeScript

  ORM for TypeScript and JavaScript. Supports MySQL, PostgreSQL, MariaDB, SQLite, MS SQL Server, Oracle, SAP Hana, WebSQL databases. Works in NodeJS, Browser, Ionic, Cordova and Electron platforms.

  

If you use Sequalize, TypeORM or for MongoDB, we have Mongoose these types of ORM tools, then you are safe by default because these help us against the SQL query injection attacks by default.

• Sequelize

  89 29,045 9.8 TypeScript

  Feature-rich ORM for modern Node.js and TypeScript, it supports PostgreSQL (with JSON and JSONB support), MySQL, MariaDB, SQLite, MS SQL Server, Snowflake, Oracle DB (v6), DB2 and DB2 for IBM i.

  

If you use Sequalize, TypeORM or for MongoDB, we have Mongoose these types of ORM tools, then you are safe by default because these help us against the SQL query injection attacks by default.

• PostgreSQL

  57 11,907 8.0 JavaScript

  PostgreSQL client for node.js.

If you don't want to use ORM then there are some other packages as well! For PostgreSQL we have node-postgres

• Mongoose

  108 26,621 10.0 JavaScript

  MongoDB object modeling designed to work in an asynchronous environment.

  

If you use Sequalize, TypeORM or for MongoDB, we have Mongoose these types of ORM tools, then you are safe by default because these help us against the SQL query injection attacks by default.

Suggest a related project