DEV Community

The Hardened Stack Series' Articles

Back to Ofri Peretz's Series
A Hardcoded sk_live_ Key Passes Code Review. It Won't Pass These 27 ESLint Rules.
Cover image for A Hardcoded sk_live_ Key Passes Code Review. It Won't Pass These 27 ESLint Rules.

A Hardcoded sk_live_ Key Passes Code Review. It Won't Pass These 27 ESLint Rules.

Comments
7 min read
MD5, exec(), and Zip Slip: 34 ESLint Rules That Fail Your Node.js CI Before They Ship.
Cover image for MD5, exec(), and Zip Slip: 34 ESLint Rules That Fail Your Node.js CI Before They Ship.

MD5, exec(), and Zip Slip: 34 ESLint Rules That Fail Your Node.js CI Before They Ship.

Comments
6 min read
jsonwebtoken Will Verify a Token Signed With algorithm: none. These 13 ESLint Rules Stop It.
Cover image for jsonwebtoken Will Verify a Token Signed With algorithm: none. These 13 ESLint Rules Stop It.

jsonwebtoken Will Verify a Token Signed With algorithm: none. These 13 ESLint Rules Stop It.

Comments
5 min read
Your Frontend Stores JWTs in localStorage and Posts to '*'. 45 ESLint Rules Catch What the Backend Audit Misses.
Cover image for Your Frontend Stores JWTs in localStorage and Posts to '*'. 45 ESLint Rules Catch What the Backend Audit Misses.

Your Frontend Stores JWTs in localStorage and Posts to '*'. 45 ESLint Rules Catch What the Backend Audit Misses.

Comments
6 min read
NestJS Hands You Guards, Pipes, and Throttlers. Your Controllers Ship Without Them. 6 ESLint Rules Catch What You Forgot.
Cover image for NestJS Hands You Guards, Pipes, and Throttlers. Your Controllers Ship Without Them. 6 ESLint Rules Catch What You Forgot.

NestJS Hands You Guards, Pipes, and Throttlers. Your Controllers Ship Without Them. 6 ESLint Rules Catch What You Forgot.

Comments
5 min read
I Inherited a NestJS Codebase. The First Lint Run Found 6 Vulnerabilities.
Cover image for I Inherited a NestJS Codebase. The First Lint Run Found 6 Vulnerabilities.

I Inherited a NestJS Codebase. The First Lint Run Found 6 Vulnerabilities.

1
Comments 2
5 min read