Extra Credit

OWASP Node.js Security Cheat Sheets

Official docs outline

8 sections
  1. Node.js Application Security

    Input validation, rate limiting, error handling and Express hardening.

  2. Node.js Server Security

    HTTP headers, cookies and process-level protections.

  3. Node.js Platform Security

    Dependency auditing, lock files and runtime protections.

  4. Node.js Docker

    Securing Node.js container images.

  5. NPM Security

    Install scripts, lockfiles, 2FA and package provenance.

  6. JavaScript and TypeScript Security

    Language-level pitfalls and safe patterns.

  7. Prototype Pollution Prevention

    Object.create(null), freezing and key validation.

  8. Next.js Security

    Server actions, middleware auth and data exposure in Next.js.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.

All 33