Tag

expressjs

Safeguard articles tagged "expressjs" — guides, analysis, and best practices for software supply chain and application security.

1 article

Application Security

Preventing log injection in Node.js and Express

A single unescaped newline in req.body can let an attacker forge fake log entries — CWE-117 log injection still hits Node apps that log with plain string concatenation.

Jul 8, 20266 min read