Express-session is not meant for production - Githubissues

mikemfleming / ruckus

🎉♬ Slack Integrated Spotify Playlist Builder ♬ 🎉

2 stars 2 forks source link

Express-session is not meant for production #11

Closed mikemfleming closed 7 years ago

mikemfleming commented 7 years ago

These are some basic precautions we can take before mvp.

Based off of https://expressjs.com/en/advanced/best-practice-security.html

Acceptance Criteria

[x] Use connect-redis https://www.npmjs.com/package/connect-redis
[x] Use supported version of Express (>4)
[x] Use Helmet
[x] Check dependencies with nsp