Node.js Security Best Practices: JWT blacklisting, rate limiting, schema validation

======⚡⚡⚡======

📚 Resources:

🕒 Timestamps:
0:00 Intro
0:30 Rate limiting
2:42 Password encryption
4:05 Docuo
6:13 JWT blacklisting
8:40 Schema validation
9:24 HTML & CSS escaping
10:01 ORMs/DRMs
11:17 Linter plugins for security

And don't forget to subscribe for more videos like this 😊

[vineetsingh]

I fell weird when I see less subscriber You at least deserve 1-2 million subscribers. Your channel is the best because no one tell these things and you not only talk about these things but also tell what to use in real world projects. Even paid courses don't teaches or even tell about these thing. You a great

[huseynovvusal]

👋🏻 Hello, Mr.Guseyn! Thanks for sharing such kinda useful tutorials. Your content is awesome and standing out among other tutorials explaining just common stuff like syntax. What you do is way more efficient for those who want to take their knowledge into higher levels. By the way, I am proud to see there are people like you publishing global and useful content on YouTube! 🇦🇿

[wishmeheaven]

Thanks!
I was actually looking for other topics such as NoSQL injection, sanitize, XXS protection, security headers, rate limiting (indeed included here), HPP and CORS.
I'm a backend development student looking to dig further at security issues...
Thank you very much for this series, and I can hardly wait to find out what other topics will it maneuvering through...

[rhraju]

Your way of explaining is awesome, Keep doing the good work. 🎉

[icaromendes]

Is the kind of content everyone needs but no one is mentioning

[babayaga]

Can u please make a video about multithreading clustering twice by quoting a example of large project scaling

[oscarnguyen]

How about the encryted payload with AES and RSA key? I'm work in a bank and this bank use this solution to security to protect its resource

[elmasx]

Hello, Guseyn. You're so sweet. I just discovered your channel and I admire it, I learned a lot. I wonder if there will be a classic nodejs, deno and bun comparison? I would like to know your opinion, regards.

[julienbietlot]

Hell9, nice vid but i would of like a bit more hands on, not just explaining concepts. Looking fwd fot next video on this topic

[tarekalkhatib]

great content, do you plan on releasing part 3 any time soon

[thomasr]

Just one thing, hashing is not technically encryption

[danielson]

NodeJS Security Best Practices:
- 1. Rate Limiting
- 2. Password Encryption
- 3. JWT Blacklisting
- 4. JSON Schema Validation
- 5. Escaping HTML & CSS
- 6. ORM/ODM agains Injections
- 7. Security Linter

[liammullan]

A piece of advice on the sound... there is a noise gate over your voice and it is way too aggressive and keeps on cutting off bits of your words.

[OscarA-cl]

I hate to break it to you, but using express-rate-limit is not reliable and won’t protect you from most DDoS attacks, as those use multiple IPs. It only helps conserve resources by preventing normal users from spamming requests, but against a DDoS bot attack, it’s pointless.

[ratedr]

Bro, get rid of that background music, it's unprofessional. (Distracting and out of place)