Security
Overview
Sails and Express provide built-in, easily configurable protection against most known types of web-application-level attacks.
Note: If you believe you have found a security vulnerability in Sails, please refer to our security policy for instructions for reporting it.
Security topics
Learn about several different types of attacks that Node.js/Sails helps prevent out of the box, and how to enable and configure security settings in your app:
- CORS
- DDOS
- CSRF
- Clickjacking
- P3P
- Content Security Policy
- Socket hijacking
- XSS
- Strict Transport Security
For a better experience on sailsjs.com, update your browser.
Built with Love
The Sails framework is built by a web & mobile shop in Austin, TX, with the help of our contributors. We created Sails in 2012 to assist us on Node.js projects. Naturally we open-sourced it. We hope it makes your life a little bit easier!
© 2012-2021 The Sails Company.
The Sails framework is free and open-source under the MIT License.
Illustrations by Edamame.