- Silicon Design & Verification
- Silicon IP
- Software Integrity
- About Us
- Silicon Design & Verification Products
- Solutions
- Resources
- Services
- Community
- Training
- Silicon IP Products
- Solutions
- Resources
- Services
- Community
- Software Integrity
- Services
- Solutions
- Resources
- Training and Education
- Support
- About Us
< Silicon Design & Verification Products
< Silicon Design & Verification Products
< Silicon Design & Verification Products
< Silicon Design & Verification Products
3D Model Generation
Simpleware Products
Simpleware for Life Sciences
Simpleware for Materials & Manufacturing
< Silicon Design & Verification Products
< Silicon Design & Verification Products
< overview
Silicon Design & Verification Products
+
Design
+
System Simulation & Modeling
+
Verification Continuum
+
3D Model Generation
+
Silicon Engineering
+
Optical Solutions
< Solutions
< Solutions
< Solutions
< Resources
< Resources
< Resources
< overview
< Services
< Services
< Services
< Community
Community
Community Overview
< Community
< Community
< Community
< Community
< Community
< Community
< Community
< overview
Community
+
Community
+
SNUG
+
Partners
+
EmbARC.org
+
Interoperability
+
Academic Programs
+
Company Blogs
+
BSIMM
< Training
< overview
< main menu
< Silicon IP Products
< Silicon IP Products
Memories & Libraries
Logic Libraries
Memory Compliers
Duet Packages
HPC Design Kit
Embedded Test & Repair
Non-Volatile Memory
< Silicon IP Products
< Silicon IP Products
Processor Solutions
ARC Processors
Embedded Vision Processors
Development Tools
Operating Systems
Ecosystem
ASIP Tools
< Silicon IP Products
< Silicon IP Products
< Silicon IP Products
< Silicon IP Products
< Silicon IP Products
< overview
Silicon IP Products
+
Interface IP
+
Memories & Libraries
+
Analog IP
+
Processor Solutions
+
IP Subsystems
+
Security IP
+
Market Segments
+
IP Accelerated
+
SoC Infrastructure IP
< Solutions
< Resources
< Services
< Services
< Services
< Community
Community
Community Overview
< Community
< Community
< Community
< Community
< Community
< Community
< Community
< overview
Community
+
Community
+
SNUG
+
Partners
+
EmbARC.org
+
Interoperability
+
Academic Programs
+
Company Blogs
+
BSIMM
< Software Integrity
< Software Integrity
< Services
< Services
Program Development & Design
BSIMM Maturity Model
Maturity Action Plan (MAP)
Policies & Standards
Metrics
Software Security-in-a-Box
< Solutions
< Solutions
< Resources
< Resources
Listen
Podcasts
< Training and Education
Product Education
< Support
< Support
Contact Support
< main menu
< About Us
< About Us
< About Us
< About Us
< About Us
< About Us
Hapi.js Security
Description
Hapi.js is a great choice for a server-side framework because of its first-level support for common security practices. In this microcourse, you will learn about the top 10 Hapi security best practices, which will help to arm you with the knowledge required to keep your Hapi applications locked down.
Learning Objectives
- Securely serve static resources
- Prevent XSS injections with secure templates
- Secure cookies with defined best practices
- Perform proper content validation
- Protect against CORS and CSRF attacks
- Implement a strong content security policy
Course Outline
- Course Overview
- Best Practice: Securely Serve Your Static Resources
- Best Practice: Use a Trusted Cross-Site Scripting (XSS) Sanitizer
- Best Practice: Use Secure-Handlebars When Possible
- Best Practice: Control Sources of Content
- Best Practice: Secure Your Cookies
- Best Practice: Validate Everything With Joi
- Best Practice: Protect Requests With the Crumb Plugin
- Best Practice: Whitelist Allowed Domains Using CORS
- Best Practice: Implement a Strong Content Security Policy (CSP) Early
- Best Practice: Protect IE Users With X-Download-Options
Details
Duration: 10 minutes
Level: Intermediate
Intended Audience:
- Back-End Developers
- Enterprise Developers
Competencies: Basic understanding of the Hapi.js framework
Prerequisites: None