Why Node permissions are experimental for now

June 27, 2023 By Mark Otto 0

Node.js Weekly

A Day in the Life of an Ethical Hacker — Ethical hackers proactively identify security weaknesses before they can be exploited by malicious actors. Learn practical steps for getting started with ethical hacking, from reconnaissance and vulnerability exploitation to responsible disclosure.

Snyk

A Look at TypeScript 5.2’s New Keyword: usingusing brings something akin to Python’s with context management into TypeScript with a way to automatically run a function when an object leaves scope. You could use it to shut down a database connection, close file handles, etc.

Matt Pocock

An Intro to Command Injection Vulnerabilities — Think SQL injection but with commands. If your app, or even one of its dependencies, constructs commands from user/third party input and runs them locally, there’s potential for trouble.

Liran Tal

🛠 Code & Tools

☕️ Along similar lines, TestCafé 3.0 has also been released. It takes a more direct approach than Nightwatch’s Selenium-derived WebDriver API approach, and v3.0 has added support for directly driving Chromium-based browsers over the Chrome DevTools Protocol.

DerbyJS 2.1: Mature MVC Web Framework — It’s never been the most popular option, but at 12 years old, Derby has lived through most of Node’s history and remains an option for building realtime, collaborative apps. GitHub repo.

Nate Smith et al.

Find Tech Jobs with Hired — Hired makes job hunting easy-instead of chasing recruiters, companies approach you with salary details up front. Create a free profile now.
Hired