security-patches v1.0.4-beta.0

Security-Patches Node Module

Description

This node module is used to patch the following security issues:

1). Removes weak MD5 hash encryption, to prevent collision attacks.

2). Add following limitations to 'upload files' input field to prevent denial-of-service attack.
    
    - Added limit to the size of the file thats being uploaded.

    - Added limit to the number of files that can be uploaded at once.

Installation

Please Follow the following steps:

1). Use the command the install security-patches node module

** Note : Make sure that the node module is installed globally.

npm i -g security-patches

2). Run the following command and pass your application file path as an argument

** Note : Make sure the file path is correct and finishes with 'server' as the end directory.

** Note : Security patches currently only work for 'server' applications.

run-security-patches <FilePath>

3). After executing the previous command you will see the following message and options

• Enter the number corresponding to the issue you want to fix and press enter.
• Enter the number corresponding to 'Exit' option to exit the function.

Setup Limitations for Input fields (OPTIONAL)

* Note : 1024 1024 * 1024 refers to 1.07 GB as max file size.

2). Enter following variable names in 'Enter property name' input field with its values in 'Enter property value' input field as press 'Add'. as shown in screen shot above.

MULTER_OPTION_FILESIZE : 1024 * 1024 * 1024,
MULTER_OPTION_FIELDS : 1000,
MULTER_OPTION_FILES : 1000,
MULTER_OPTION_PARTS : 100,

** Note : These are the default value settings, please change them according to your needs.