# draftdotdev

Published articles for draftdotdev.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Preventing broken access control in express Node.js applications

DevFeed: [Preventing broken access control in express Node.js applications](<https://devfeed.tech/articles/preventing-broken-access-control-in-express-node-js-applications-8049.md>)

Original publisher: [Read original article](<https://snyk.io/blog/preventing-broken-access-control-express-node-js/>)

Author: Ben Smitthimedhin

Published: 2024-05-22T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Access Control](<https://devfeed.tech/topics/access-control.md>), [Express](<https://devfeed.tech/topics/express.md>), [Node.js](<https://devfeed.tech/topics/node-js.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>), [Back end](<https://devfeed.tech/topics/backend.md>), [Code](<https://devfeed.tech/topics/code.md>)

Tags: [access-control](<https://devfeed.tech/tags/access-control.md>), [acquisition](<https://devfeed.tech/tags/acquisition.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [backend](<https://devfeed.tech/tags/backend.md>), [blog](<https://devfeed.tech/tags/blog.md>), [code](<https://devfeed.tech/tags/code.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [developer](<https://devfeed.tech/tags/developer.md>), [draftdotdev](<https://devfeed.tech/tags/draftdotdev.md>), [express](<https://devfeed.tech/tags/express.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [js](<https://devfeed.tech/tags/js.md>), [middleware](<https://devfeed.tech/tags/middleware.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [open-source-security](<https://devfeed.tech/tags/open-source-security.md>), [snyk-code](<https://devfeed.tech/tags/snyk-code.md>), [snyk-open-source](<https://devfeed.tech/tags/snyk-open-source.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [web-applications](<https://devfeed.tech/tags/web-applications.md>)

### AI overview

This article explains broken access control in backend Node.js applications built with Express. It describes how flawed authorization rules can expose private data, permit restricted actions, or allow privilege escalation, and introduces code examples of vertical access control vulnerabilities such as unprotected administrative routes.

### Source excerpt

In this article, you'll learn more about broken access control in Node.js applications and strategies to prevent such vulnerabilities when building web applications based on the Express web framework.

## How to secure Python Flask applications

DevFeed: [How to secure Python Flask applications](<https://devfeed.tech/articles/how-to-secure-python-flask-applications-8079.md>)

Original publisher: [Read original article](<https://snyk.io/blog/secure-python-flask-applications/>)

Author: Gourav Singh Bais

Published: 2024-05-21T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Flask](<https://devfeed.tech/topics/flask.md>), [Python](<https://devfeed.tech/topics/python.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>), [configuration](<https://devfeed.tech/topics/configuration.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [ASGI](<https://devfeed.tech/topics/asgi.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [acquisition](<https://devfeed.tech/tags/acquisition.md>), [application-security](<https://devfeed.tech/tags/application-security.md>), [article](<https://devfeed.tech/tags/article.md>), [best-practices](<https://devfeed.tech/tags/best-practices.md>), [blog](<https://devfeed.tech/tags/blog.md>), [configuration](<https://devfeed.tech/tags/configuration.md>), [developer](<https://devfeed.tech/tags/developer.md>), [draftdotdev](<https://devfeed.tech/tags/draftdotdev.md>), [flask](<https://devfeed.tech/tags/flask.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [open-source-security](<https://devfeed.tech/tags/open-source-security.md>), [python](<https://devfeed.tech/tags/python.md>), [security-vulnerabilities](<https://devfeed.tech/tags/security-vulnerabilities.md>), [snyk-code](<https://devfeed.tech/tags/snyk-code.md>), [snyk-open-source](<https://devfeed.tech/tags/snyk-open-source.md>), [web](<https://devfeed.tech/tags/web.md>), [web-applications](<https://devfeed.tech/tags/web-applications.md>)

### AI overview

This article explains how to secure Python Flask applications. It introduces Flask and the WSGI standard, identifies common risks such as XSS, CSRF, and SQL injection, and presents insecure configuration examples alongside practices for mitigating security issues.

### Source excerpt

In this article, you'll learn about some best practices related to securing Python applications built with the Flask web application framework. You'll start by looking at some insecure configuration examples and then learn how to mitigate and fix any issues.

## The ultimate guide to creating a secure Python package

DevFeed: [The ultimate guide to creating a secure Python package](<https://devfeed.tech/articles/the-ultimate-guide-to-creating-a-secure-python-package-8221.md>)

Original publisher: [Read original article](<https://snyk.io/blog/ultimate-guide-creating-secure-python-package/>)

Author: Gourav Singh Bais

Published: 2024-05-08T05:00:00Z

Content type: tutorial

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Python](<https://devfeed.tech/topics/python.md>), [pip](<https://devfeed.tech/topics/pip.md>), [Code](<https://devfeed.tech/topics/code.md>), [Security](<https://devfeed.tech/topics/security.md>), [TLS (Transport Layer Security)](<https://devfeed.tech/topics/tls.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [acquisition](<https://devfeed.tech/tags/acquisition.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [code](<https://devfeed.tech/tags/code.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [developer](<https://devfeed.tech/tags/developer.md>), [devsecops](<https://devfeed.tech/tags/devsecops.md>), [documentation](<https://devfeed.tech/tags/documentation.md>), [draftdotdev](<https://devfeed.tech/tags/draftdotdev.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [github](<https://devfeed.tech/tags/github.md>), [guide](<https://devfeed.tech/tags/guide.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [installation](<https://devfeed.tech/tags/installation.md>), [open-source-security](<https://devfeed.tech/tags/open-source-security.md>), [packages](<https://devfeed.tech/tags/packages.md>), [pycharm](<https://devfeed.tech/tags/pycharm.md>), [pypi](<https://devfeed.tech/tags/pypi.md>), [python](<https://devfeed.tech/tags/python.md>), [python-packages](<https://devfeed.tech/tags/python-packages.md>), [security](<https://devfeed.tech/tags/security.md>), [snyk-code](<https://devfeed.tech/tags/snyk-code.md>), [snyk-open-source](<https://devfeed.tech/tags/snyk-open-source.md>), [tls](<https://devfeed.tech/tags/tls.md>), [tutorial](<https://devfeed.tech/tags/tutorial.md>)

### AI overview

This guide explains how to create a modern secure Python package, covering package structure, metadata, tests, documentation, installation, imports, distribution, and use of public or private package indexes. It also discusses using TLS to secure private indexes and provides a GitHub repository with the tutorial code.

### Source excerpt

This guide will detail all the steps to build a modern Python package.

## Preventing SQL injection attacks in Node.js

DevFeed: [Preventing SQL injection attacks in Node.js](<https://devfeed.tech/articles/preventing-sql-injection-attacks-in-node-js-8051.md>)

Original publisher: [Read original article](<https://snyk.io/blog/preventing-sql-injection-attacks-node-js/>)

Author: Lucien Chemaly

Published: 2024-02-20T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Node.js](<https://devfeed.tech/topics/node-js.md>), [Security](<https://devfeed.tech/topics/security.md>), [SQL](<https://devfeed.tech/topics/sql.md>), [Express](<https://devfeed.tech/topics/express.md>), [PostgreSQL](<https://devfeed.tech/topics/postgresql.md>), [Sanitization](<https://devfeed.tech/topics/sanitization.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>)

Tags: [acquisition](<https://devfeed.tech/tags/acquisition.md>), [application-security](<https://devfeed.tech/tags/application-security.md>), [attacks](<https://devfeed.tech/tags/attacks.md>), [blog](<https://devfeed.tech/tags/blog.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [developer](<https://devfeed.tech/tags/developer.md>), [draftdotdev](<https://devfeed.tech/tags/draftdotdev.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [node](<https://devfeed.tech/tags/node.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [postgresql](<https://devfeed.tech/tags/postgresql.md>), [security](<https://devfeed.tech/tags/security.md>), [server](<https://devfeed.tech/tags/server.md>), [snyk](<https://devfeed.tech/tags/snyk.md>), [snyk-code](<https://devfeed.tech/tags/snyk-code.md>), [snyk-open-source](<https://devfeed.tech/tags/snyk-open-source.md>), [sql](<https://devfeed.tech/tags/sql.md>), [validation](<https://devfeed.tech/tags/validation.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

This article explains how SQL injection attacks affect Node.js applications when user input is incorporated into SQL queries without proper validation, sanitization, or safe query construction. It demonstrates the issue with an Express application connected to PostgreSQL and introduces ways to protect applications from unauthorized access and data leakage.

### Source excerpt

In this article, you'll learn more about why SQL injection attacks pose a significant threat and how to shield your Node.js applications against them.

## Preventing server-side request forgery in Node.js applications

DevFeed: [Preventing server-side request forgery in Node.js applications](<https://devfeed.tech/articles/preventing-server-side-request-forgery-in-node-js-applications-8050.md>)

Original publisher: [Read original article](<https://snyk.io/blog/preventing-server-side-request-forgery-node-js/>)

Author: David Ekete

Published: 2024-02-20T05:00:00Z

Content type: tutorial

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Node.js](<https://devfeed.tech/topics/node-js.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>)

Tags: [acquisition](<https://devfeed.tech/tags/acquisition.md>), [applications](<https://devfeed.tech/tags/applications.md>), [blog](<https://devfeed.tech/tags/blog.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [developer](<https://devfeed.tech/tags/developer.md>), [draftdotdev](<https://devfeed.tech/tags/draftdotdev.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [open-source-security](<https://devfeed.tech/tags/open-source-security.md>), [security](<https://devfeed.tech/tags/security.md>), [snyk-code](<https://devfeed.tech/tags/snyk-code.md>), [snyk-open-source](<https://devfeed.tech/tags/snyk-open-source.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

A tutorial on understanding server-side request forgery and mitigating it in Node.js applications, with an example web application that retrieves images from user-provided URLs.

### Source excerpt

This article will explore SSRF, its potential risks, and the strategies to mitigate SSRF in Node.js applications.

## How to prevent open redirect vulnerabilities in Laravel

DevFeed: [How to prevent open redirect vulnerabilities in Laravel](<https://devfeed.tech/articles/how-to-prevent-open-redirect-vulnerabilities-in-laravel-7960.md>)

Original publisher: [Read original article](<https://snyk.io/blog/how-to-prevent-open-redirect-vulnerabilities-in-laravel/>)

Author: Kevin Kimani

Published: 2023-12-27T05:00:00Z

Content type: tutorial

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Laravel](<https://devfeed.tech/topics/laravel.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>), [PHP](<https://devfeed.tech/topics/php.md>), [Composer](<https://devfeed.tech/topics/composer.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [Node.js](<https://devfeed.tech/topics/node-js.md>), [npm](<https://devfeed.tech/topics/npm.md>), [SQLite](<https://devfeed.tech/topics/sqlite.md>), [vs-code](<https://devfeed.tech/topics/vs-code.md>)

Tags: [application-security](<https://devfeed.tech/tags/application-security.md>), [applications](<https://devfeed.tech/tags/applications.md>), [article](<https://devfeed.tech/tags/article.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [code](<https://devfeed.tech/tags/code.md>), [dependencies](<https://devfeed.tech/tags/dependencies.md>), [developer](<https://devfeed.tech/tags/developer.md>), [developers](<https://devfeed.tech/tags/developers.md>), [draftdotdev](<https://devfeed.tech/tags/draftdotdev.md>), [guide](<https://devfeed.tech/tags/guide.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [laravel](<https://devfeed.tech/tags/laravel.md>), [node](<https://devfeed.tech/tags/node.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [npm](<https://devfeed.tech/tags/npm.md>), [php](<https://devfeed.tech/tags/php.md>), [snyk](<https://devfeed.tech/tags/snyk.md>), [snyk-platform](<https://devfeed.tech/tags/snyk-platform.md>), [sqlite](<https://devfeed.tech/tags/sqlite.md>), [terminal](<https://devfeed.tech/tags/terminal.md>), [testing](<https://devfeed.tech/tags/testing.md>), [validation](<https://devfeed.tech/tags/validation.md>), [vs-code](<https://devfeed.tech/tags/vs-code.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

### AI overview

This tutorial explains open redirect vulnerabilities in Laravel, including how insufficient validation or sanitization can let attackers redirect users to malicious websites. It also demonstrates using Snyk to detect the vulnerability in application code and dependencies.

### Source excerpt

In this article, you'll learn more about open redirect vulnerabilities and how you can prevent them in Laravel. You'll also learn how to use Snyk to detect this vulnerability in your code and dependencies.

## Command injection in Python: examples and prevention

DevFeed: [Command injection in Python: examples and prevention](<https://devfeed.tech/articles/command-injection-in-python-examples-and-prevention-7868.md>)

Original publisher: [Read original article](<https://snyk.io/blog/command-injection-python-prevention-examples/>)

Author: Rubaiat Hossain

Published: 2023-12-21T07:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Python](<https://devfeed.tech/topics/python.md>), [Security](<https://devfeed.tech/topics/security.md>), [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>)

Tags: [application-security](<https://devfeed.tech/tags/application-security.md>), [apps](<https://devfeed.tech/tags/apps.md>), [article](<https://devfeed.tech/tags/article.md>), [attacks](<https://devfeed.tech/tags/attacks.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [command-line](<https://devfeed.tech/tags/command-line.md>), [developer](<https://devfeed.tech/tags/developer.md>), [draftdotdev](<https://devfeed.tech/tags/draftdotdev.md>), [examples](<https://devfeed.tech/tags/examples.md>), [open-source-security](<https://devfeed.tech/tags/open-source-security.md>), [python](<https://devfeed.tech/tags/python.md>), [security](<https://devfeed.tech/tags/security.md>), [security-best-practices](<https://devfeed.tech/tags/security-best-practices.md>), [snyk-code](<https://devfeed.tech/tags/snyk-code.md>), [snyk-open-source](<https://devfeed.tech/tags/snyk-open-source.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

### AI overview

This article explains command injection vulnerabilities in Python applications, including how unsafe user input passed to system shells or dynamically constructed commands can enable arbitrary command execution. It describes potential consequences such as data breaches and system compromise, and presents security best practices for prevention.

### Source excerpt

In this article, you'll learn all about command injection, including how this vulnerability can manifest in your programs. You'll also learn about common security best practices to safeguard your Python apps from command injection attacks.

## Code injection in Python: examples and prevention

DevFeed: [Code injection in Python: examples and prevention](<https://devfeed.tech/articles/code-injection-in-python-examples-and-prevention-7865.md>)

Original publisher: [Read original article](<https://snyk.io/blog/code-injection-python-prevention-examples/>)

Author: Lucien Chemaly

Published: 2023-12-06T05:00:00Z

Content type: tutorial

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Python](<https://devfeed.tech/topics/python.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Security](<https://devfeed.tech/topics/security.md>), [Code](<https://devfeed.tech/topics/code.md>), [Programming](<https://devfeed.tech/topics/programming.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [acquisition](<https://devfeed.tech/tags/acquisition.md>), [best-practices](<https://devfeed.tech/tags/best-practices.md>), [blog](<https://devfeed.tech/tags/blog.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [developer](<https://devfeed.tech/tags/developer.md>), [draftdotdev](<https://devfeed.tech/tags/draftdotdev.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [programming](<https://devfeed.tech/tags/programming.md>), [python](<https://devfeed.tech/tags/python.md>), [security](<https://devfeed.tech/tags/security.md>), [snyk-platform](<https://devfeed.tech/tags/snyk-platform.md>), [software](<https://devfeed.tech/tags/software.md>), [software-development](<https://devfeed.tech/tags/software-development.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

This tutorial explains how code injection vulnerabilities can affect Python applications. It describes risks from mishandled user input, insecure functions, unvetted third-party code, and vulnerable framework or database configurations, and emphasizes secure coding practices and validation.

### Source excerpt

Learn about the dangers and importance of secure coding conventions, particularly regarding code injection vulnerabilities and how these manifest in Python applications.

## Dependency injection in Python

DevFeed: [Dependency injection in Python](<https://devfeed.tech/articles/dependency-injection-in-python-7886.md>)

Original publisher: [Read original article](<https://snyk.io/blog/dependency-injection-python/>)

Author: Lucien Chemaly

Published: 2023-10-31T05:00:00Z

Content type: tutorial

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Dependency injection](<https://devfeed.tech/topics/dependency-injection.md>), [Python](<https://devfeed.tech/topics/python.md>), [coding](<https://devfeed.tech/topics/coding.md>)

Tags: [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [coding](<https://devfeed.tech/tags/coding.md>), [dependency-injection](<https://devfeed.tech/tags/dependency-injection.md>), [developer](<https://devfeed.tech/tags/developer.md>), [draftdotdev](<https://devfeed.tech/tags/draftdotdev.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [open-source-security](<https://devfeed.tech/tags/open-source-security.md>), [python](<https://devfeed.tech/tags/python.md>), [snyk-open-source](<https://devfeed.tech/tags/snyk-open-source.md>), [tutorial](<https://devfeed.tech/tags/tutorial.md>)

### AI overview

A tutorial explaining dependency injection in Python, including how it works, how to apply it, and how it improves software flexibility, maintainability, testability, and ease of updates.

### Source excerpt

This tutorial will show you how DI works, how to use it, and how it can make your Python projects better.

## The art of conditional rendering: Tips and tricks for React and Next.js developers

DevFeed: [The art of conditional rendering: Tips and tricks for React and Next.js developers](<https://devfeed.tech/articles/the-art-of-conditional-rendering-tips-and-tricks-for-react-and-next-js-developers-7870.md>)

Original publisher: [Read original article](<https://snyk.io/blog/conditional-rendering-react-next-js/>)

Author: Kumar Harsh

Published: 2023-10-30T13:00:00Z

Content type: tutorial

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Next.js](<https://devfeed.tech/topics/next-js.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>)

Tags: [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [developer](<https://devfeed.tech/tags/developer.md>), [draftdotdev](<https://devfeed.tech/tags/draftdotdev.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [next-js](<https://devfeed.tech/tags/next-js.md>), [open-source-security](<https://devfeed.tech/tags/open-source-security.md>), [performance](<https://devfeed.tech/tags/performance.md>), [react](<https://devfeed.tech/tags/react.md>), [remix](<https://devfeed.tech/tags/remix.md>), [routing](<https://devfeed.tech/tags/routing.md>), [snyk-open-source](<https://devfeed.tech/tags/snyk-open-source.md>), [snyk-platform](<https://devfeed.tech/tags/snyk-platform.md>), [ui](<https://devfeed.tech/tags/ui.md>), [web-applications](<https://devfeed.tech/tags/web-applications.md>)

### AI overview

A tutorial on conditional rendering in React, Next.js, and Remix. It explains benefits including performance and tailored UI behavior, distinguishes conditional rendering from conditional routing, and covers implementation approaches.

### Source excerpt

In this article, you'll learn about the benefits of conditional rendering, how it differs from conditional routing, and how to implement both in React, Next.js, and Remix.

## How to secure JavaScript applications right from the CLI

DevFeed: [How to secure JavaScript applications right from the CLI](<https://devfeed.tech/articles/how-to-secure-javascript-applications-right-from-the-cli-7962.md>)

Original publisher: [Read original article](<https://snyk.io/blog/how-to-secure-javascript-applications-right-from-the-cli/>)

Author: Gideon Idoko

Published: 2023-10-24T20:00:00Z

Content type: tutorial

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [JavaScript](<https://devfeed.tech/topics/javascript.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [snyk](<https://devfeed.tech/topics/snyk.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Security](<https://devfeed.tech/topics/security.md>), [CI/CD](<https://devfeed.tech/topics/cicd.md>)

Tags: [acquisition](<https://devfeed.tech/tags/acquisition.md>), [application-security](<https://devfeed.tech/tags/application-security.md>), [blog](<https://devfeed.tech/tags/blog.md>), [ci-cd](<https://devfeed.tech/tags/ci-cd.md>), [cli](<https://devfeed.tech/tags/cli.md>), [developer](<https://devfeed.tech/tags/developer.md>), [draftdotdev](<https://devfeed.tech/tags/draftdotdev.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [open-source-security](<https://devfeed.tech/tags/open-source-security.md>), [security](<https://devfeed.tech/tags/security.md>), [snyk](<https://devfeed.tech/tags/snyk.md>), [snyk-platform](<https://devfeed.tech/tags/snyk-platform.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

This tutorial explains how to secure JavaScript applications with the Snyk CLI. It covers scanning code and dependencies for known vulnerabilities, detecting issues early, receiving remediation guidance, and integrating security checks into CI/CD workflows.

### Source excerpt

This article will guide you through the process of securing your JavaScript applications using the Snyk CLI.

## Modern VS Code extension development tutorial: Building a secure extension

DevFeed: [Modern VS Code extension development tutorial: Building a secure extension](<https://devfeed.tech/articles/modern-vs-code-extension-development-tutorial-building-a-secure-extension-8020.md>)

Original publisher: [Read original article](<https://snyk.io/blog/modern-vs-code-extension-development-tutorial/>)

Author: Mdu Sibisi

Published: 2023-10-02T05:00:00Z

Content type: tutorial

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [VS Code Extension](<https://devfeed.tech/topics/vscode-extension.md>), [Visual Studio Code](<https://devfeed.tech/topics/visual-studio-code.md>), [Development](<https://devfeed.tech/topics/development.md>), [TypeScript](<https://devfeed.tech/topics/typescript.md>), [Webpack](<https://devfeed.tech/topics/webpack.md>), [Node.js](<https://devfeed.tech/topics/node-js.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [Git](<https://devfeed.tech/topics/git.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [building](<https://devfeed.tech/tags/building.md>), [cli](<https://devfeed.tech/tags/cli.md>), [code](<https://devfeed.tech/tags/code.md>), [developer](<https://devfeed.tech/tags/developer.md>), [development](<https://devfeed.tech/tags/development.md>), [draftdotdev](<https://devfeed.tech/tags/draftdotdev.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [extension](<https://devfeed.tech/tags/extension.md>), [git](<https://devfeed.tech/tags/git.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [node](<https://devfeed.tech/tags/node.md>), [tutorial](<https://devfeed.tech/tags/tutorial.md>), [typescript](<https://devfeed.tech/tags/typescript.md>), [vs-code](<https://devfeed.tech/tags/vs-code.md>), [webpack](<https://devfeed.tech/tags/webpack.md>)

### AI overview

This tutorial explains how to build a multifunctional VS Code extension. It introduces the required tools, project scaffolding with Yeoman and the VS Code Extension Generator, and recommended TypeScript and Webpack tooling.

### Source excerpt

In our first modern VS Code extension development blog post, we covered the basics of VS Code development, including the architecture and the various types you can create. This article will help you apply that knowledge by showing you how to create and code your very own VS Code extension.

## Signing container images: Comparing Sigstore, Notary, and Docker Content Trust

DevFeed: [Signing container images: Comparing Sigstore, Notary, and Docker Content Trust](<https://devfeed.tech/articles/signing-container-images-comparing-sigstore-notary-and-docker-content-trust-8101.md>)

Original publisher: [Read original article](<https://snyk.io/blog/signing-container-images/>)

Author: Hrittik Roy

Published: 2023-09-26T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Containers](<https://devfeed.tech/topics/containers.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Security](<https://devfeed.tech/topics/security.md>), [Docker](<https://devfeed.tech/topics/docker.md>)

Tags: [article](<https://devfeed.tech/tags/article.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [container-security](<https://devfeed.tech/tags/container-security.md>), [cryptographic](<https://devfeed.tech/tags/cryptographic.md>), [developer](<https://devfeed.tech/tags/developer.md>), [devops](<https://devfeed.tech/tags/devops.md>), [docker](<https://devfeed.tech/tags/docker.md>), [draftdotdev](<https://devfeed.tech/tags/draftdotdev.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [oidc](<https://devfeed.tech/tags/oidc.md>), [openid-connect](<https://devfeed.tech/tags/openid-connect.md>), [security](<https://devfeed.tech/tags/security.md>), [signing](<https://devfeed.tech/tags/signing.md>), [sigstore](<https://devfeed.tech/tags/sigstore.md>), [snyk-container](<https://devfeed.tech/tags/snyk-container.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [transparency-log](<https://devfeed.tech/tags/transparency-log.md>), [tutorial](<https://devfeed.tech/tags/tutorial.md>)

### AI overview

This article compares Sigstore Cosign, Notary v2, and Docker Content Trust for signing and verifying container images. It explains how cryptographic signatures help establish image authenticity, integrity, ownership, accountability, and supply-chain compliance, then introduces a tutorial for integrating one of the tools into a workflow.

### Source excerpt

In this article, we will compare three popular container signing solutions: Sigstore Cosign, Notary v2, and Docker Content Trust (DCT), (a.k.a. Notary v1). You'll learn about their features, capabilities, and suitability for securing container image supply chains.

## How to prevent NullPointerExceptions in Java

DevFeed: [How to prevent NullPointerExceptions in Java](<https://devfeed.tech/articles/how-to-prevent-nullpointerexceptions-in-java-7959.md>)

Original publisher: [Read original article](<https://snyk.io/blog/how-to-prevent-nullpointerexceptions-in-java/>)

Author: Lucien Chemaly

Published: 2023-09-21T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Programming](<https://devfeed.tech/topics/programming.md>), [debugging](<https://devfeed.tech/topics/debugging.md>), [Code](<https://devfeed.tech/topics/code.md>), [App](<https://devfeed.tech/topics/app.md>)

Tags: [article](<https://devfeed.tech/tags/article.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [debugging](<https://devfeed.tech/tags/debugging.md>), [developer](<https://devfeed.tech/tags/developer.md>), [development](<https://devfeed.tech/tags/development.md>), [draftdotdev](<https://devfeed.tech/tags/draftdotdev.md>), [errors](<https://devfeed.tech/tags/errors.md>), [java](<https://devfeed.tech/tags/java.md>), [jvm](<https://devfeed.tech/tags/jvm.md>), [learn](<https://devfeed.tech/tags/learn.md>), [programming](<https://devfeed.tech/tags/programming.md>), [techniques](<https://devfeed.tech/tags/techniques.md>)

### AI overview

This article explains NullPointerExceptions in Java, including what causes them, how they can affect application stability and reliability, and techniques for preventing them. It discusses null object references, common situations that trigger the exception, application crashes, unpredictable behavior, debugging difficulties, and possible security vulnerabilities.

### Source excerpt

In this article, you'll learn all about NullPointerExceptions in Java, including their causes, consequences, and most importantly, prevention techniques.

## Modern VS Code extension development: The basics

DevFeed: [Modern VS Code extension development: The basics](<https://devfeed.tech/articles/modern-vs-code-extension-development-the-basics-8019.md>)

Original publisher: [Read original article](<https://snyk.io/blog/modern-vs-code-extension-development-basics/>)

Author: Mdu Sibisi

Published: 2023-09-14T05:00:00Z

Content type: tutorial

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Visual Studio Code](<https://devfeed.tech/topics/visual-studio-code.md>)

Tags: [architecture](<https://devfeed.tech/tags/architecture.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [best-practices](<https://devfeed.tech/tags/best-practices.md>), [blog](<https://devfeed.tech/tags/blog.md>), [developer](<https://devfeed.tech/tags/developer.md>), [development](<https://devfeed.tech/tags/development.md>), [draftdotdev](<https://devfeed.tech/tags/draftdotdev.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [extension](<https://devfeed.tech/tags/extension.md>), [json](<https://devfeed.tech/tags/json.md>), [themes](<https://devfeed.tech/tags/themes.md>), [types](<https://devfeed.tech/tags/types.md>), [vs-code](<https://devfeed.tech/tags/vs-code.md>)

### AI overview

A primer on developing Visual Studio Code extensions, covering extension categories, extension architecture, and development best practices. The excerpt also explains theme extensions and their JSON-based configuration.

### Source excerpt

In this part of the "Modern VS Code Extension Development" series, you'll discuss various extension types, delve into the typical architecture of VS Code extensions, and learn about some best practices for VS Code extension development.

## A guide to input validation with Spring Boot

DevFeed: [A guide to input validation with Spring Boot](<https://devfeed.tech/articles/a-guide-to-input-validation-with-spring-boot-7949.md>)

Original publisher: [Read original article](<https://snyk.io/blog/guide-to-input-validation-with-spring-boot/>)

Author: Lucien Chemaly

Published: 2023-09-12T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Application Development](<https://devfeed.tech/topics/application-development.md>), [Security](<https://devfeed.tech/topics/security.md>), [Database](<https://devfeed.tech/topics/database.md>), [User Experience](<https://devfeed.tech/topics/user-experience.md>)

Tags: [application-development](<https://devfeed.tech/tags/application-development.md>), [article](<https://devfeed.tech/tags/article.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [database](<https://devfeed.tech/tags/database.md>), [developer](<https://devfeed.tech/tags/developer.md>), [draftdotdev](<https://devfeed.tech/tags/draftdotdev.md>), [guide](<https://devfeed.tech/tags/guide.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [java](<https://devfeed.tech/tags/java.md>), [passwords](<https://devfeed.tech/tags/passwords.md>), [security](<https://devfeed.tech/tags/security.md>), [snyk-code](<https://devfeed.tech/tags/snyk-code.md>), [validation](<https://devfeed.tech/tags/validation.md>)

### AI overview

A guide to using Bean Validation with Spring Boot to validate input and form data, check data before database storage, enforce security policies, and improve application quality and user experience.

### Source excerpt

In this article, you'll learn more about the various applications of Bean Validation, including how to implement it in Spring Boot, enabling you to effectively utilize it for your own projects.

## Node.js vs. Deno vs. Bun: Performance & JavaScript Runtime Comparison

DevFeed: [Node.js vs. Deno vs. Bun: Performance & JavaScript Runtime Comparison](<https://devfeed.tech/articles/node-js-vs-deno-vs-bun-performance-javascript-runtime-comparison-7991.md>)

Original publisher: [Read original article](<https://snyk.io/blog/javascript-runtime-compare-node-deno-bun/>)

Author: Liran Tal

Published: 2023-09-05T05:00:00Z

Content type: comparison

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Node.js](<https://devfeed.tech/topics/node-js.md>), [Bun](<https://devfeed.tech/topics/bun.md>), [Deno](<https://devfeed.tech/topics/deno.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [Back end](<https://devfeed.tech/topics/backend.md>), [Web Development](<https://devfeed.tech/topics/web-development.md>), [Rust](<https://devfeed.tech/topics/rust.md>), [Zig](<https://devfeed.tech/topics/zig.md>)

Tags: [awareness](<https://devfeed.tech/tags/awareness.md>), [backend](<https://devfeed.tech/tags/backend.md>), [benchmark](<https://devfeed.tech/tags/benchmark.md>), [benchmarks](<https://devfeed.tech/tags/benchmarks.md>), [blog](<https://devfeed.tech/tags/blog.md>), [bun](<https://devfeed.tech/tags/bun.md>), [comparison](<https://devfeed.tech/tags/comparison.md>), [compatibility](<https://devfeed.tech/tags/compatibility.md>), [developer](<https://devfeed.tech/tags/developer.md>), [developers](<https://devfeed.tech/tags/developers.md>), [draftdotdev](<https://devfeed.tech/tags/draftdotdev.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [performance](<https://devfeed.tech/tags/performance.md>), [rust](<https://devfeed.tech/tags/rust.md>), [speed](<https://devfeed.tech/tags/speed.md>)

### AI overview

This comparison examines Node.js, Deno, and Bun as JavaScript runtimes. It discusses their performance, security, development experience, scalability, tooling, compatibility, and suitability for backend applications. It also reports a Bun benchmark against Deno and Node.js for an HTTP handler rendering a server-side React page.

### Source excerpt

Node.js, Bun, and Deno: we compare these three popular JavaScript runtimes so you can determine which is the right one for your project.

## Best practices for building a production-ready Dockerfile for PHP applications

DevFeed: [Best practices for building a production-ready Dockerfile for PHP applications](<https://devfeed.tech/articles/best-practices-for-building-a-production-ready-dockerfile-for-php-applications-7855.md>)

Original publisher: [Read original article](<https://snyk.io/blog/building-production-ready-dockerfile-php/>)

Author: James Walker

Published: 2023-08-22T05:00:00Z

Content type: tutorial

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [PHP](<https://devfeed.tech/topics/php.md>), [Deployment](<https://devfeed.tech/topics/deployment.md>), [configuration](<https://devfeed.tech/topics/configuration.md>), [App](<https://devfeed.tech/topics/app.md>)

Tags: [acquisition](<https://devfeed.tech/tags/acquisition.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [best-practices](<https://devfeed.tech/tags/best-practices.md>), [blog](<https://devfeed.tech/tags/blog.md>), [container-security](<https://devfeed.tech/tags/container-security.md>), [deployment](<https://devfeed.tech/tags/deployment.md>), [developer](<https://devfeed.tech/tags/developer.md>), [devops](<https://devfeed.tech/tags/devops.md>), [docker](<https://devfeed.tech/tags/docker.md>), [docker-image](<https://devfeed.tech/tags/docker-image.md>), [draftdotdev](<https://devfeed.tech/tags/draftdotdev.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [php](<https://devfeed.tech/tags/php.md>), [production](<https://devfeed.tech/tags/production.md>), [security](<https://devfeed.tech/tags/security.md>), [snyk-container](<https://devfeed.tech/tags/snyk-container.md>), [tutorial](<https://devfeed.tech/tags/tutorial.md>)

### AI overview

A tutorial on building production-ready Dockerfiles for PHP applications, covering specific base-image tags and environment-variable configuration.

### Source excerpt

In this tutorial, you'll learn how to write a dependable Dockerfile for PHP applications.

## Secure Java URL encoding and decoding

DevFeed: [Secure Java URL encoding and decoding](<https://devfeed.tech/articles/secure-java-url-encoding-and-decoding-7990.md>)

Original publisher: [Read original article](<https://snyk.io/blog/java-url-encoding-decoding/>)

Author: Jura Gorohovsky

Published: 2023-08-14T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Programming](<https://devfeed.tech/topics/programming.md>), [ASCII](<https://devfeed.tech/topics/ascii.md>), [Security](<https://devfeed.tech/topics/security.md>), [Amazon API Gateway](<https://devfeed.tech/topics/amazon-api-gateway.md>), [HTML](<https://devfeed.tech/topics/html.md>), [Routing (disambiguation)](<https://devfeed.tech/topics/routing.md>)

Tags: [acquisition](<https://devfeed.tech/tags/acquisition.md>), [api](<https://devfeed.tech/tags/api.md>), [api-gateway](<https://devfeed.tech/tags/api-gateway.md>), [article](<https://devfeed.tech/tags/article.md>), [ascii](<https://devfeed.tech/tags/ascii.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [developer](<https://devfeed.tech/tags/developer.md>), [draftdotdev](<https://devfeed.tech/tags/draftdotdev.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [html](<https://devfeed.tech/tags/html.md>), [java](<https://devfeed.tech/tags/java.md>), [programming](<https://devfeed.tech/tags/programming.md>), [security](<https://devfeed.tech/tags/security.md>), [server](<https://devfeed.tech/tags/server.md>), [snyk-code](<https://devfeed.tech/tags/snyk-code.md>)

### AI overview

This article explains URL encoding and decoding in Java. It describes percent-encoding characters outside the permitted URL character set, clarifies that URL encoding is not encryption, and discusses use cases such as HTML form input, external API calls, and API gateways. It also explains parsing, interoperability, and security risks caused by unencoded URLs.

### Source excerpt

This article discusses Java, why URL encoding and decoding are important, and how to approach it properly.

## Implementing TLS in Kubernetes

DevFeed: [Implementing TLS in Kubernetes](<https://devfeed.tech/articles/implementing-tls-in-kubernetes-7968.md>)

Original publisher: [Read original article](<https://snyk.io/blog/implementing-tls-kubernetes/>)

Author: Rubaiat Hossain

Published: 2023-07-31T05:00:00Z

Content type: tutorial

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Cryptography](<https://devfeed.tech/topics/cryptography.md>)

Tags: [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [cloud-security](<https://devfeed.tech/tags/cloud-security.md>), [container-security](<https://devfeed.tech/tags/container-security.md>), [developer](<https://devfeed.tech/tags/developer.md>), [devops](<https://devfeed.tech/tags/devops.md>), [draftdotdev](<https://devfeed.tech/tags/draftdotdev.md>), [encryption](<https://devfeed.tech/tags/encryption.md>), [http](<https://devfeed.tech/tags/http.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [security](<https://devfeed.tech/tags/security.md>), [tls](<https://devfeed.tech/tags/tls.md>)

### AI overview

A tutorial on configuring TLS for applications running on Kubernetes to secure client traffic with HTTPS. It explains certificates, ingress and service entry points, and Kubernetes Secrets and ConfigMaps for certificate management.

### Source excerpt

This article will guide you through implementing a TLS connection for your applications on a Kubernetes cluster, providing you with a comprehensive understanding of TLS and its importance in securing your applications and data.

## Control your role! Kubernetes RBAC explored

DevFeed: [Control your role! Kubernetes RBAC explored](<https://devfeed.tech/articles/control-your-role-kubernetes-rbac-explored-7996.md>)

Original publisher: [Read original article](<https://snyk.io/blog/kubernetes-rbac-explored/>)

Author: James Walker

Published: 2023-07-27T05:00:00Z

Content type: tutorial

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [article](<https://devfeed.tech/tags/article.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [container-security](<https://devfeed.tech/tags/container-security.md>), [devops](<https://devfeed.tech/tags/devops.md>), [devsecops](<https://devfeed.tech/tags/devsecops.md>), [draftdotdev](<https://devfeed.tech/tags/draftdotdev.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [json](<https://devfeed.tech/tags/json.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [learn](<https://devfeed.tech/tags/learn.md>)

### AI overview

A tutorial on Kubernetes role-based access control (RBAC), covering roles, permissions, and why RBAC is preferred over ABAC for Kubernetes authorization.

### Source excerpt

In this article, you'll learn what Kubernetes RBAC is, why you should use it, and how to configure it in your cluster.