News for hackers. Stuff that matters.

A comment on Ask HN: What security issues should I be worried about with Node.js?.

Re:Ask HN: What security issues should I be worried about wi... by dreamdu5t on Friday August 12, 2011 @08:15PM (#2879795)
Server-side javascript injection? There's no such thing. Node doesn't work like that. It doesn't accept and execute javascript over HTTP at all.

Same concerns as any web stack: CSFR, DB injection, leaving sensitive data/files exposed over the web, allowing remote DB connections, etc.

[ Parent | on HN ]

There are no comments on this comment yet.