Let's talk about Security in Vue & Nuxt
summary
Covers OWASP Top 10 and shows a Nuxt module that wires up Helmet/CORS, adds content-security-policy and other response headers, plugs an XSS sanitizer, and exposes rate limiting and basic auth middleware. Demo sets the limiter to two requests and returns a 429, and enabling the module immediately adds many security headers. Recommends using Snyk (or Snyk-like tools) and moving heavy throttling to infra tools like fail2ban or Cloudflare for production; Elk (a Mastodon client) already uses the module.
AI-written summary · about
chapters (8)
- 0:00Introduction to web security
- 2:18Understanding OWASP Top 10
- 5:53Common web security threats
- 7:03npm package security issues
- 8:42Securing Vue and Nuxt apps
- 10:43Nuxt security module demo
- 14:33GitHub and community impact
- 16:13Security Q&A and wrap up
related talks
28mMore Secure Vue & Nuxt Apps - By Default
13mSecurity in modern Web Applications - OWASP to the rescue
35mVue Fortified: Best Practices for Web App Security
56mNode.js Security
07mHow Developers Can Use Automated App Security Testing To Protect Vue Apps
29mWho Are Vue? Authn In Vue, The Important Parts
01h 31mSecure Vue app
34mAuthentication in Nuxt