Cargando…
Patterns in Node package vulnerabilities : essential findings for busy developers /
With more than 500 new Node.js packages arriving each day, npm is the world's largest reusable package registry and the Node ecosystem's greatest strength. But as the number of detected vulnerabilities continues to rise significantly, the packages themselves are becoming a liability. This...
| Clasificación: | Libro Electrónico |
|---|---|
| Autor principal: | |
| Formato: | Electrónico eBook |
| Idioma: | Inglés |
| Publicado: |
Sebastopol, CA :
O'Reilly Media,
[2018]
|
| Edición: | First edition. |
| Temas: | |
| Acceso en línea: | Texto completo (Requiere registro previo con correo institucional) |
| Sumario: | With more than 500 new Node.js packages arriving each day, npm is the world's largest reusable package registry and the Node ecosystem's greatest strength. But as the number of detected vulnerabilities continues to rise significantly, the packages themselves are becoming a liability. This ebook shows application developers and penetration testers practical strategies for evaluating and working with today's npm packages. Author Chetan Karande (Securing Node Applications) analyzes package vulnerabilities found by security researchers and the Node community, including common coding mistakes behind the most severe and frequently found problems. While the database is by no means comprehensive due to the flood of new packages, these known vulnerabilities still provide a valuable guide to help you conduct a manual code review of npm packages. You'll examine the top Node package vulnerabilities, including: Insecure access to the filesystem that leads to directory traversal and symlink attacks Pitfalls that often cause Node developers to inadvertently expose sensitive data Denial-of-service attacks that can prevent legitimate users from accessing your service Cross-site scripting (XSS), a prevalent web application security flaw and frequently occurring vulnerability in Node packages Injection vulnerabilities that enable attackers to obtain, corrupt, or destroy server contents. |
|---|---|
| Descripción Física: | 1 online resource (1 volume) : illustrations |
| ISBN: | 1491999977 9781491999974 |