tl;dr Untrusted data passed into unserialize() function  in node-serialize module can be exploited to achieve arbitrary code execution by passing a serialized JavaScript Object with an Immediately invoked function expression (IIFE). The Bug During a Node. (more…)

Hello! In this post I'll describe my quick and dirty solution for documenting node.js REST API. When I started exploring possible ways of documentation, I found two approaches: Documentation in code Separate documentation For my OSS projects it's a overki... (more…)

I feel there is a tendency to forget that we, or somebody else, will have to maintain our code weeks, months or even years after its… (more…)

Stripe is redefining e-commerce. Patrick and John Collison had a very specific insight into the future of internet businesses: primarily… (more…)

The Node.js Foundation and NodeSource are improving extensibility and security for the server-side JavaScript platform...