Historical errata for Secure Your Node.js Web Application

“In this chapter we being building our application by pouring the foundation.” should be “begin building”

“less people have access” should be “fewer people have access”

“credit card information..” should be “credit card information.”
“And trust me neither are your users.” should be “And trust me, neither are your users.”

“determining the extend of the breach” should be “extent”

“This is because and I quote” should be “This is because, and I quote,”

The quote also needs to be attributed.

“which we will use to supple the database connection information.” supple => supply

“This will seriously hinter an attacker” - hinter => hinder

“So let’s limit the cookie exposure to it’s minimum.”
it’s => its

“But the point is that always remember to do access validation and always test the expected behaviour.”

“But the point is this: ” ?

I was hoping this chapter would do more than show some ad hoc access control and instead talk about handling it at a higher level of abstraction, either through custom middleware or by pointing to suitable npm modules.

“By the end of this chapter you should be able to avoid shooting yourself and your Node.js service in the leg before the big race.”
Mixed metaphor? Should at least be foot instead of leg.

“Let me bring you an example I found the ‘connect’ framework while I was doing my master’s thesis”

“Let me share an example” and “I found in the…”

“request handling can have it’s quirks as well”

it’s => its

DOM XSS image is the same as Stored XSS.

“a integral part” should be “an integral part”.

“common then forgetting” should be “common than forgetting”.

It’s a formatting issue, funny story:
HTML Escaping table is escaping the content, so the formatting is all wrong. Probably this input I am entering text in will escape HTML as well so I won’t try to write the correct format; you should go open the PDF to find out what this is about.

In the last paragraph of the page says “results.More importantly”, I think there is a missing space after the dot and before the M.

‘dependences’ instead of ‘dependencies’

chp-5-database/mysql-exploitable-fixed.js
Query doesn’t work for Karl. Generated SQL: SELECT * FROM accounts WHERE name=“‘karl’”
Fix: ‘SELECT * FROM accounts WHERE name=’ + connection.escape(req.params.name)

-var RedisStore = require(‘connect-redis’)(express);
+var RedisStore = require(‘connect-redis’)(session);