▲ 446 ▼ PHP was just the beginning: Node.js unveils dangerous flaws threatening millions of sites (cybernews.com) submitted 6 days ago by goatinspace@feddit.org to c/technology@lemmy.world 92 comments fedilink hide all child comments Node.js has just released fixes for 10 security vulnerabilities that could put node-powered applications at risk and is urging everyone to update their systems.
[–] BevsDad@lemmy.ca 34 points 6 days ago (2 children) This what you get for running JS as your back end! permalink fedilink source hideshow 2 child comments replies: [–] dual_sport_dork@lemmy.world 23 points 6 days ago This always struck me as a rather silly idea, to be honest. Now we've come full circle. I have a vendor who is insisting that I use node.js and pull their code from their NPM repository from the same... For frontend code. Just, have the entire contents of your (their) node_modules folder exposed to the public internet at all times. Isn't this just Javascript with extra steps? permalink fedilink source parent [–] juanito_the_great@sh.itjust.works 4 points 6 days ago* While it's a bit opportunistic to blame JS in the backend in this case, I despise JS in the backend enough to happily join you. Serves you well JS enthusiasts, your programming language is the only one that I despise more the more I learn about it. :P permalink fedilink source parent
[–] dual_sport_dork@lemmy.world 23 points 6 days ago This always struck me as a rather silly idea, to be honest. Now we've come full circle. I have a vendor who is insisting that I use node.js and pull their code from their NPM repository from the same... For frontend code. Just, have the entire contents of your (their) node_modules folder exposed to the public internet at all times. Isn't this just Javascript with extra steps? permalink fedilink source parent
[–] juanito_the_great@sh.itjust.works 4 points 6 days ago* While it's a bit opportunistic to blame JS in the backend in this case, I despise JS in the backend enough to happily join you. Serves you well JS enthusiasts, your programming language is the only one that I despise more the more I learn about it. :P permalink fedilink source parent