expressjs / expressjs.com

https://expressjs.com
Other
5.25k stars 1.47k forks source link

Update security and performance best practices #1466

Open crandmck opened 8 months ago

crandmck commented 8 months ago

This is a reminder to review these topics in light of the changes originally proposed in #1004 from @wesleytodd, which I closed due to extensive merge conflicts (it was 5+ years old).

If the fundamental changes in that PR are worth preserving, then let's open a new PR. If not, then we can close this, but I didn't want to just toss out the work since it covers some important topics.

wesleytodd commented 8 months ago

Oh wow I forgot about this one! I wonder if we should also split this into two and hand the security docs over to the @expressjs/security-triage team?

UlisesGascon commented 8 months ago

I wonder if we should also split this into two and hand the security docs over to the @expressjs/security-triage team?

Sounds like we can work on it and propose a PR. I will add it to the initiatives https://github.com/expressjs/security-wg/issues/1