Common vulnerabilities in applications
According to Wikipedia, a vulnerability is a weakness in the application that allows an attacker to reduce a system's information assurance. Applications expose different types of vulnerability.
Let's look at some important vulnerabilities and how to prevent them.
Helmet
Helmet is a Node.js library that helps you prevent various attacks by setting various security-related HTTP headers.
Here are the various headers added by Helmet:
Strict-Transport-Policy
: This header is used to enforce secure (HTTP over SSL/TLS) connections to the server. HTTPS prevents man-in-the-middle attacks. In a man-in-the-middle attack, an attacker secretly alters the communication between the client and server. This is done to steal data, add ads to web pages, and so on.X-Frame-Options
: This header provides clickjacking protection. Clickjacking is a technique by which an attacker uses multiple transparent or opaque layers to trick a user into clicking on a button or...