JavaScript for Line of Business Applications

Here is a starting guide for securing express.js applications, specifically Express v3. It is by no means a comprehensive guide on web application security. Standard rules and practices apply to express.js apps just as if they would to Rails, Django or any other web application.

I’m going to hit the high points of items that always seem to come up.

Learn how to protect your Express Node application from cross-site scripting, script injection, clickjacking, insecure requests, and more by using a set of Express middleware provided by Helmet.