Best of Snyk2023

  1. 1
    Article
    Avatar of snykSnyk·3y

    Modern VS Code extension development: The basics

    Microsoft Visual Studio (VS) Code is currently the most popular source code editor. It can be used as a fully-fledged integrated development environment (IDE) All you need to do is add the right set of extensions from the Visual Studio Code Marketplace. Snyk Security is defined as a linter and programming language extension.

  2. 2
    Article
    Avatar of snykSnyk·3y

    Node.js vs. Deno vs. Bun: JavaScript runtime comparison

    Node.js vs. Bun is the latest upstart, offering blistering speed and significantly outperforming its rivals. Deno aims to improve its security via fine-grained access controls. Bun is still in beta and has some gaps to fill out to be fully production-ready.

  3. 3
    Article
    Avatar of snykSnyk·3y

    How to protect Node.js apps from CSRF attacks

    This article explores how CSRF attacks work in Node.js applications and provides strategies to protect against them. It covers the synchronizer token pattern (STP), SameSite cookies, and the Double Submit Cookie pattern. The article also mentions the importance of testing CSRF protection and provides best practices for securing Node.js applications.

  4. 4
    Article
    Avatar of snykSnyk·2y

    Top 3 security best practices for handling JWTs

    Ensure the security of your web applications by following the top 3 security best practices for handling JWTs. Keep JWTs secret, validate them properly, and set expiration times to prevent vulnerabilities and breaches. Use tools like Snyk to identify and remediate security issues related to JWTs.

  5. 5
    Article
    Avatar of snykSnyk·3y

    Modern VS Code extension development tutorial: Building a secure extension

    Learn how to build a secure VS Code extension using modern development practices. Explore the tools needed, project preparation, and running the extension.

  6. 6
    Article
    Avatar of snykSnyk·3y

    Dependency injection in Python

    Learn about the concept of dependency injection in Python, its benefits for code maintainability, modularity, and testability, and its limitations. Explore how dependency injection can be implemented in popular Python frameworks such as Flask, Django, and FastAPI. Also, discover the different Python dependency injection frameworks available and how they can contribute to your project. Finally, learn about the importance of keeping project dependencies secure with Snyk and how it integrates with Python development workflows.

  7. 7
    Article
    Avatar of snykSnyk·2y

    3 tips for rebuilding a Docker image faster (and save CI seconds!)

    Learn tips for rebuilding Docker images faster, including using a .dockerignore file, using a dependency lockfile, and grouping commands based on their likelihood to change.

  8. 8
    Article
    Avatar of snykSnyk·3y

    Improving the UI/UX of the Snyk VS Code extension

    Improvements were made to the UI/UX of the Snyk VS Code extension, including addressing layout inconsistencies, reducing custom code, adhering to the VS Code design system, and adding subtle touches to enhance the overall design.

  9. 9
    Article
    Avatar of snykSnyk·3y

    How to update cURL

    Learn how to update cURL on different operating systems like macOS, Windows, and Linux. Get the latest version and secure your system.

  10. 10
    Article
    Avatar of snykSnyk·3y

    Comparing Node.js web frameworks: Which is most secure?

    A comparison of security capabilities among different Node.js web frameworks: Express.js, NestJS, and Fastify. NestJS is observed to closely adhere to Node.js security best practices. Choosing the right framework depends on individual strengths, use cases, and additional integrated packages.

  11. 11
    Article
    Avatar of snykSnyk·3y

    Node.js multithreading with worker threads: pros and cons

    Learn about the pros and cons of Node.js multithreading with worker threads. Explore the differences between worker threads in Node.js and multithreading in other programming languages. Discover popular libraries that make working with worker threads easier.

  12. 12
    Article
    Avatar of snykSnyk·3y

    The art of conditional rendering: Tips and tricks for React and Next.js developers

    Learn about the benefits of conditional rendering in React, the difference between conditional rendering and conditional routing, and how to implement conditional rendering in React, Next.js, and Remix.

  13. 13
    Article
    Avatar of snykSnyk·3y

    Building Vue 3 components with Tailwind CSS

    Learn how to build Vue 3 components using Tailwind CSS, a versatile CSS framework that provides utility classes for styling UI elements. This tutorial covers setting up Tailwind with Vue, the benefits of using Tailwind CSS, and how to handle breakpoints in Tailwind CSS.

  14. 14
    Article
    Avatar of snykSnyk·2y

    Secure password hashing in Go

    Learn about the best practices for password hashing, common attack methods used to crack hashed passwords, and the available hashing algorithms in Go.

  15. 15
    Article
    Avatar of snykSnyk·3y

    A guide to input validation with Spring Boot

    Bean Validation can be used in Spring Boot applications for input and form validation, data validation prior to saving to a database, and enforcement of various security policies. This helps developers prevent errors, improve the overall quality of the application, and ensure that data is consistent throughout the application.