Some analysis of the 1M most popular sites on the web

Re:Some analysis of the 1M most popular sites on the web by ktusznio on Friday July 24, 2015 @12:58PM (#9943391)

What about services like npm that distribute code? Are these analogous or do they have additional security in place?

[ Parent | on HN ]

Re:Some analysis of the 1M most popular sites on the web by jacquesm on Friday July 24, 2015 @01:05PM (#9943453)

Isn't that server side?

[ Parent | on HN ]

Re:Some analysis of the 1M most popular sites on the web by ktusznio on Friday July 24, 2015 @07:10PM (#9945788)

Yes, but the same attack could happen if an attacker gains control of an npm module. Users without tight control over their modules could unwittingly pull in malicious code.

[ Parent | on HN ]

Re:Some analysis of the 1M most popular sites on the web by Zikes on Friday July 24, 2015 @02:06PM (#9943950)

With dependency resolution and node_modules folders dozens of levels deep, it's pretty difficult to verify untrusted code hasn't been injected somewhere.

[ Parent | on HN ]

Re:Some analysis of the 1M most popular sites on the web by hexasquid on Friday July 24, 2015 @02:16PM (#9944037)

Not really. NPM is also used with a tool called browserify to enable frontend web developers to use NPM modules in the browser.

[ Parent | on HN ]