Chapter 9. Securing Your Application

In this chapter, you will learn the following topics:

• Basic safety – turning off autopublish
• Basic safety – removing insecure
• Securing data transactions with allow and deny
• Hiding data with façades
• Protecting the client with browser-policy

Introduction

Meteor makes development and prototyping as fast and easy as possible. To accomplish this, there are some default packages installed that have no business in a production application. As you prepare your app for production, you will want to remove the packages that make prototyping easier, and replace them with some security best practices, to make your application more secure. In this chapter, we will go through the baseline security mechanisms needed to prepare an application for production.

Basic safety – turning off autopublish

Quickly and easily accessing your data saves you an enormous amount of time when you're prototyping! The autopublish package, which is installed...