nean-stack-starter icon indicating copy to clipboard operation
nean-stack-starter copied to clipboard

Security check!

Open CharlBest opened this issue 6 years ago • 0 comments

https://cheatsheets.pragmaticwebsecurity.com

Check innerHTML injection Remove all Angular bypass security calls Check all non-hard coded urls, src, hrefs and prevent user from changing/setting/alterning them

Free scanning solutions: Github owasp dependacny scannin snyk dependacy scanning https://blog.developer.bazaarvoice.com/2018/02/27/getting-started-with-dependency-security-and-nodejs/ https://jeremylong.github.io/DependencyCheck/analyzers/nodejs.html

Place Angular route guard on paths that can only be access when authenticated like profile or create and edit pages

302 redirect to login when unauthenticated

CharlBest avatar Sep 20 '19 16:09 CharlBest