Secure Your Node.js Web Application

Protect the Client Application and Data

Let’s start with the client application. We’re going to skip how to educate and protect the user because that’s a whole different task and a topic for another book. We’ll start from the source of the data and work our way through to when it reaches the server.

XSS and caching attacks are among the most popular attacks at this point. We look at XSS in great detail in its own chapter Chapter 11, ​Fight Cross-Site Scripts​, so we won’t dig into this attack vector here. Since XSS is a popular attack method, you need to go through the XSS chapter to protect your users.

Browsers rely on caches and autocomplete tools to speed up web browsing and help users accomplish more things while doing less ...