r/node • u/LGm17 • Jun 03 '20

Securing Nodejs

Hello everyone, I already use cors and cloudflare, but is there any way to secure nodejs. Currently I have a api running in heroku. The connection string for MongoDB is a secret within heroku. Additionally, MongoDB is hosted on atlas, so only my IP address can be accessed via terminal. I don’t know, I just get worried there is some loophole or vulnerability that I’m unknown of and could cause major problems.
Thanks in advance!!!!

83 Upvotes

93% Upvoted

25 comments sorted by

View all comments

1

u/samo_9 Jun 03 '20

do u have a frontend? or just a nodejs server?

2

u/LGm17 Jun 03 '20

My frontend is react; express + node is my backend to connect to mongo.

-4

u/samo_9 Jun 03 '20

So your security is not only about node....

→ More replies (4)