Node.js security practices
antonlawrence.blogspot.com