0

Essentially I would like to know what the title suggests. Node.js/Express is nice. However, node is a fairly recent thing and hence there may be security risks by exposing the server to the real world. So, my question really boils down to what sort of things should one be careful about when exposing node to the rest of the world and what necessary (or advised) procedures should one follow in order to run a node server online and avoid, to the extent possible, successful vulnerability attacks from others, security breaches, and so on.

Thanks in advance for your help.

(I am reposting here what I previously posted on StackOverflow.)

Improve this question

1 Answer 1

Reset to default
2

Well to give you some context on Node.js: It's production ready.

  • Yahoo! just announced they're redoing Yahoo in Node.js They mentioned many things are already in Node

  • WalMart Labs is using it to proxy all their traffic. They used it as the first line to help manage the traffic load on black friday. #nodebf on Twitter. Contributed HAPI

  • Paypal is switching to Node and has many parts running in it already. Contributed Kraken.

Node itself can act as a web server, proxy, app, etc. If these large corporations are using Node.js they are making large investments in resources.

Improve this answer
1
  • Thank you for your time. This was also my decision back in November and now that I know the above three bullets I feel better. :)
    – MightyMouse
    Jan 23, 2014 at 20:46

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .