Posts

Showing posts from November, 2019

Teamcity and octupus deployment

Avoid publishing secrets to the npm registry

Prevent unsafe redirects

Avoid DOS attacks by explicitly setting

Modify session middleware settings

Configure 2FA for npm or Yarn

Hide error details from clients

working with child processes

Run unsafe code in a sandbox

Safe module loading

Prevent evil RegEx

Avoid JavaScript eval statements

Limit payload size

Run Node.js as non-root user

Prevent brute-force attacks against authorization

Support blacklisting JWT tokens

Validate incoming JSON schemas

Escape HTML, JS and CSS output

Handling passwords use Bcrypt

inspect for vulnerable dependencies

Adjust the HTTP response headers

Avoid DOS attacks

Prevent query injection vulnerabilities

Extract secrets from config files

Limit concurrent requests using a middleware

Embrace linter security rules

Antiforgery in C#

Cross-site request forgery

How to generate and Sign Certificate Request