Skip to main content

In this article

JavaScript and Node.js Security – The Common Pitfalls

Written by

April 11, 2018

0 mins read

JavaScript and Node.js have shown themselves to be amazing platforms. Their sheer ease of use has empowered an entire community of creative individuals to build amazing things. Like in all cases, however, amongst the goodness lurk some risks. Nobody’s perfect, including Node.js and JavaScript, and a language’s strength can quickly translate to its vulnerability if looked through through an evil (or paranoid) lens.

I’ve given many talks about JavaScript security, looking to do my share in raising awareness and to keep our applications safer. Of those, my talk from the wonderful JSKongress went especially well. Check out the following edited-down version that is a great way to learn about the most common JS security pitfalls while enjoying a 20-minute live hacking session!

Want to know more?

I hope you enjoyed the video! You can also check if your applications have known vulnerabilities by using Snyk on your project to test your dependencies. Sign up to test your code here.

Read more

Blog

Frontier models found the vulnerabilities. Only the attacker found the chains.

Static analysis found the flaws, but only live attack testing proved how they could be chained into breaches. A comparison of Evo COS, Claude Security, and Claude Code Security.

feature insights context
Blog

Autonomous Attacks Are Already Here. The Defense Has to Match Their Speed.

Autonomous attackers are shrinking the window for defense. Learn how continuous discovery, remediation, validation, and prevention can help security teams keep pace.

Blog

Why AI Coding Agents Keep Writing Broken Access Control

AI coding agents can produce authorization logic that compiles and passes review while exposing one tenant’s data to another. Learn why broken access control is difficult to detect and how to prevent it.