Secure Your Node.js Web Application

Wrapping Up

Databases are an integral and powerful part of a web application, and you must secure all transactions in order to protect your clients’ data. As you learned in this chapter, you must secure your database connections and limit access privileges where you can. You must also be vigilant about escaping and validating all user input that comes into contact with the database, even if it’s a NoSQL database. Implementing these two steps will greatly increase the security of your data.

Now that you’ve secured how the application communicates with the database, the attackers will find it harder to target your application. Don’t get too cozy just yet, because there are many more attack vectors to defeat out there. Next we’ll move ...