{"type":"rich","version":"1.0","provider_name":"Transistor","provider_url":"https://transistor.fm","author_name":"Cybersecurity Tech Brief By HackerNoon","title":"Implementing the OWASP API Security Top 10 in Node.js and PostgreSQL","html":"<iframe width=\"100%\" height=\"180\" frameborder=\"no\" scrolling=\"no\" seamless src=\"https://share.transistor.fm/e/260f9717\"></iframe>","width":"100%","height":180,"duration":1094,"description":"\n        This story was originally published on HackerNoon at: https://hackernoon.com/implementing-the-owasp-api-security-top-10-in-nodejs-and-postgresql.\nOWASP API Security Top 10 (2023) with vulnerable code, working fixes and tests in Node.js: BOLA, auth, rate limits, SSRF and a CI authorization matrix.\nCheck more stories related to cybersecurity at: https://hackernoon.com/c/cybersecurity.\n            You can also check exclusive content about #owasp, #api-security, #owasp-api-security-top-10, #express.js-security, #node.js-api-security, #api-authentication, #postgresql-row-level-security, #api-rate-limiting,  and more.\nThis story was written by: @AJAYKUMAR_evq18mss. Learn more about this writer by checking @AJAYKUMAR_evq18mss's about page,\n            and for more stories, please visit hackernoon.com.\nA hands-on walkthrough of the OWASP API Security Top 10 using a sample Node.js, Express, and PostgreSQL application. Each vulnerability is demonstrated through insecure code, followed by defensive implementations and automated tests. The guide covers authorization, authentication, resource limits, SSRF, configuration, and third-party API security, culminating in a CI authorization matrix.","thumbnail_url":"https://img.transistorcdn.com/SySK4I0jwuU6AzeawZdYiDqTq8yzBjxJ5qfTpUuAxEo/rs:fill:0:0:1/w:400/h:400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS9zaG93/LzQxMjY2LzE2ODM1/ODIzNTYtYXJ0d29y/ay5qcGc.webp","thumbnail_width":300,"thumbnail_height":300}