Test Your Application’s Code Quality

The first thing to get right when starting a white box analysis on your application is to validate your own code. I assume we’re not talking about one file with fewer than a hundred lines of code. Therefore, meticulously going over every line of code by hand isn’t feasible.

An important part of writing a secure web application is maintaining code quality. Security errors frequently start as simple coding mistakes that can be exploited by attackers. Instability can easily be used to launch denial-of-service attacks.

Maintaining code quality as the team and application grow can be daunting, especially by hand. Fortunately, tools such as JSLint[85] and JSHint.[86] are available. They perform static analysis ...

Get Secure Your Node.js Web Application now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.