Patterns in Node package vulnerabilities : essential findings for busy developers / Chetan Karande.

Format:

Book

Author/Creator:

Karande, Chetan, author.

Language:

English

Subjects (All):

Node.js.

Web applications.

Application software--Development.

Application software.

JavaScript (Computer program language).

Physical Description:

1 online resource (1 volume) : illustrations

Edition:

First edition.

Place of Publication:

Sebastopol, CA : O'Reilly Media, [2018]

System Details:

text file

Summary:

With more than 500 new Node.js packages arriving each day, npm is the world’s largest reusable package registry and the Node ecosystem’s greatest strength. But as the number of detected vulnerabilities continues to rise significantly, the packages themselves are becoming a liability. This ebook shows application developers and penetration testers practical strategies for evaluating and working with today’s npm packages. Author Chetan Karande ( Securing Node Applications ) analyzes package vulnerabilities found by security researchers and the Node community, including common coding mistakes behind the most severe and frequently found problems. While the database is by no means comprehensive due to the flood of new packages, these known vulnerabilities still provide a valuable guide to help you conduct a manual code review of npm packages. You’ll examine the top Node package vulnerabilities, including: Insecure access to the filesystem that leads to directory traversal and symlink attacks Pitfalls that often cause Node developers to inadvertently expose sensitive data Denial-of-service attacks that can prevent legitimate users from accessing your service Cross-site scripting (XSS), a prevalent web application security flaw and frequently occurring vulnerability in Node packages Injection vulnerabilities that enable attackers to obtain, corrupt, or destroy server contents

Notes:

Description based on online resource; title from title page (Safari, viewed June 22, 2018).

ISBN:

9781491999981

1491999985

9781491999974

1491999977

OCLC:

1041857966