Charles M Wood

Vzdělání

Byznys

Jak na to

Technika

JSJ 311: Securing Express Apps with Helmet.js with Evan Hahn

JavaScript Jabber

Stay current on JavaScript, Node, and Front-End development. Learn from experts in programming, careers, and technology every week. Become a supporter of this podcast: <a href="https://www.spreaker.com/podcast/javascript-jabber--6102064/support?utm_source=rss&utm_medium=rss&utm_campaign=rss">https://www.spreaker.com/podcast/javascript-jabber--6102064/support</a>.

Panel: <ul><li>Charles Max Wood</li></ul> Special Guests: Evan HahnIn this episode, the JavaScript Jabber panelists discuss securing Express apps with Helmet.js with Evan Hahn. Evan is a developer at <a href="https://airtable.com/" target="_blank" rel="noreferrer noopener">Airtable</a>, which is a company that builds spreadsheet applications that are powerful enough that you can make applications with. He has also worked at <a href="https://www.braintreepayments.com/" target="_blank" rel="noreferrer noopener">Braintree</a>, which does payment processing for companies. They talk about what <a href="https://helmetjs.github.io/" target="_blank" rel="noreferrer noopener">Helmet.js</a> is, when you would want to use it, and why it can help secure your <a href="https://expressjs.com/" target="_blank" rel="noreferrer noopener">Express</a> apps. They also touch on when you wouldn’t want to use Helmet and the biggest thing that it saves you from in your code.In particular, we dive pretty deep on:<ul><li>Evan intro</li><li><a href="https://www.javascript.com/" target="_blank" rel="noreferrer noopener">JavaScript </a></li><li>What is <a href="https://helmetjs.github.io/" target="_blank" rel="noreferrer noopener">Helmet.js</a>?</li><li><a href="https://nodejs.org/en/" target="_blank" rel="noreferrer noopener">Node</a> and <a href="https://expressjs.com/" target="_blank" rel="noreferrer noopener">Express</a></li><li>Why would you use the approach of Middleware?</li><li>Helmet is not the only solution</li><li>Http headers</li><li>Current maintainer of Helmet.js</li><li><a href="https://www.npmjs.com/" target="_blank" rel="noreferrer noopener">npm</a></li><li>Has added a lot to the project, but is not the original creator</li><li>Outbound HTTP response headers</li><li>Helmet doesn’t fully secure your app but it does help secure it</li><li>How does using Helmet work?</li><li>Are there instances when you wouldn’t want to use Helmet?</li><li>No cash middleware</li><li>Where do you set the configuration options?</li><li>Top level Helmet module</li><li>12 modules</li><li>What is the biggest thing that Helmet saves you from?</li><li>Content security policy code</li><li>And much, much more!</li></ul>Links:<ul><li><a href="https://airtable.com/" target="_blank" rel="noreferrer noopener">Airtable</a></li><li><a href="https://www.braintreepayments.com/" target="_blank" rel="noreferrer noopener">Braintree</a></li><li><a href="https://www.javascript.com/" target="_blank" rel="noreferrer noopener">JavaScript</a></li><li><a href="https://helmetjs.github.io/" target="_blank" rel="noreferrer noopener">Helmet.js</a></li><li><a href="https://nodejs.org/en/" target="_blank" rel="noreferrer noopener">Node</a></li><li><a href="https://expressjs.com/" target="_blank" rel="noreferrer noopener">Express</a></li><li><a href="https://www.npmjs.com/" target="_blank" rel="noreferrer noopener">npm</a></li><li><a href="https://evanhahn.com/" target="_blank" rel="noreferrer noopener">Evan’s Website</a></li><li><a href="https://twitter.com/evanhahn?lang=en" target="_blank" rel="noreferrer noopener">@EvanHahn</a></li><li><a href="https://github.com/EvanHahn" target="_blank" rel="noreferrer noopener">Evan’s GitHub</a></li></ul>Picks:Charles<ul><li>Camera</li><li><a href="https://www.amazon.com/Zoom-H6-Six-Track-Portable-Recorder/dp/B00DFU9BRK/ref=sr_1_3?ie=UTF8&keywords=zoom+h6&qid=1525105848&s=musical-instruments&sr=1-3" target="_blank" rel="noreferrer noopener">Zoom H6</a></li><li><a href="https://www.amazon.com/Shure-SM58-LC-Cardioid-Dynamic-Microphone/dp/B0179T2CM8/ref=sr_1_1_sspa?ie=UTF8&keywords=shure+sm58&psc=1&qid=1525105890&s=musical-instruments&smid=AZH80ONF88EC1&sr=1-1-spons" target="_blank" rel="noreferrer noopener">Shure SM58</a></li><li><a href="https://www.youtube.com/c/devchattv" target="_blank" rel="noreferrer noopener">DevChat.tv Youtube</a></li><li><a href="https://devchat.tv/react-round-up" target="_blank" rel="noreferrer noopener">React Round Up</a></li></ul>Evan<ul><li><a href="https://clojure.org/" target="_blank" rel="noreferrer noopener">Clojure</a></li><li><a href="http://fortune.js.org/" target="_blank" rel="noreferrer noopener">Fortune</a></li><li><a href="https://www.imdb.com/title/tt6983520/" target="_blank" rel="noreferrer noopener">Kantaro: The Sweet Tooth Salaryman</a></li></ul> Support this podcast at — <a href="https://redcircle.com/javascript-jabber/donations" target="_blank" rel="noreferrer noopener">https://redcircle.com/javascript-jabber/donations</a> Privacy & Opt-Out: <a href="https://redcircle.com/privacy" target="_blank" rel="noreferrer noopener">https://redcircle.com/privacy</a> Become a supporter of this podcast: <a href="https://www.spreaker.com/podcast/javascript-jabber--6102064/support?utm_source=rss&utm_medium=rss&utm_campaign=rss">https://www.spreaker.com/podcast/javascript-jabber--6102064/support</a>.

Aplikace Youradio Talk

JSJ 311: Securing Express Apps with Helmet.js with Evan Hahn

Poslechněte si podcast