Node Security Basics
Protect Node apps from common attacks: injection, XSS, CSRF and leaked secrets.
What you'll learn
- Prevent SQL and NoSQL injection
- Stop XSS with escaping and CSP
- Add CSRF protection and secure cookies
- Keep secrets and dependencies safe
About this course
You attack and then fix a deliberately weak Express app. Each module covers one class of problem and the fix that stops it.
Course curriculum
4 modules and 12 lessons over 3 weeks. Plan for about 9 learning hours.
01InjectionWeek 1 · 3 lessons
- SQL injection
- NoSQL injection
- Parameterized queries
02Browser attacksWeek 1 · 3 lessons
- XSS
- Content Security Policy
- CSRF
03ConfigurationWeek 2 · 3 lessons
- Secure headers with Helmet
- Cookies
- Secrets
04DependenciesWeek 3 · 3 lessons
- npm audit
- Updates
- Fix report
Project
Security fixes. A weak Express app with each vulnerability fixed and documented.
Who this course is for
Node developers who deploy apps to the internet.
Prerequisites
You build Express apps with a database.
What's included
- 120-day course access
- Step-by-step lessons
- Practice files
- Reusable code templates
- A graded final exercise
- A digital completion certificate
Learning format
Self-paced practical course, part of our self-paced courses. Graded final exercise with written feedback.
Access and delivery
- Enrollment is activated within 15 minutes after payment.
- Final exercise feedback is delivered within 2 business days of submission, and the completion certificate is issued within 2 business days after passing the final exercise.
Certificate
You receive a digital completion certificate. Final exercise feedback is delivered within 2 business days of submission, and the completion certificate is issued within 2 business days after passing the final exercise.
Frequently asked questions
When does access start?
Enrollment is activated within 15 minutes after payment.
Is payment taken on this website?
No. After you submit your enrollment request, we reply by email with payment details and enrollment confirmation.
Does this course guarantee a job or income?
No. It is an education and training service and does not include employment, income or placement guarantees.
Can I cancel?
Our Refund and Cancellation Policy lists the terms for self-paced course programs.
