security-essentials | Essential security techniques for Meteor applications

security-essentials is a JavaScript library. security-essentials has no bugs, it has no vulnerabilities and it has low support. You can download it from GitHub.

Security should be a major part of every Meteor developer's planning. Without security, our applications are vulnerable to all kinds of attacks. This talk will go over some security essentials that you can (and should) use in your own applications. We'll take a look at:. Why to remove two packages that ship with Meteor that render your app a field day for any in-the-know attacker. Defining rules for how the database can be manipulated from the client. Making use of Meteor's publish and subscribe methods to control what data is accessible on the client when. Installing the check package and its companion audit-argument-checks to validate arguments passed to server-side methods. Installing and configuring the browser-policy package to control which content can be loaded in your app and whether your app can be framed. Storing sensitive information like API keys in settings.json and how to share specific information with the client and the server.