ExpressJS: Advanced Topics - Security best practices

[yufanz]

http://expressjs.com/en/advanced/best-practice-security.html

• [x] Don’t use deprecated or vulnerable versions of Express
• [ ] Use TLS
• [ ] Use Helmet
• [ ] Use cookies securely
• [ ] Prevent brute-force attacks against authorization
• [ ] Ensure your dependencies are secure
• [ ] Avoid other known vulnerabilities
• [ ] Additional considerations