4 ms·

Node.js is not a web framework. http://expressjs.com/advanced/security-updates.html http://expressjs.com/advanced/security-updates.html

• deleted 11y ago
  [deleted]
• LunaSea 11y ago
  Express.js has 5 vulnerabilities in 6 years. Yeah I think I'm going to take my chances with Express.js rather than Ruby on Rails with it 57 vulnerabilities in 6 years.
  • dham 11y ago
    Express is a micro framework, Rails is not. Rails covers more ground. You would want to compare security of Express to Sinatra or Grape.
  • sanderjd 11y ago
    The problem with thinking this way is that you don't know what security issues that nobody knows about yet are lurking in there. I remember the time before the recent spate of Rails vulnerabilities in the last 5 years or so, and I thought similarly about its security as you seem to about the Nodejs ecosystem. It's definitely possible that your confidence won't ever be punctured by a similar run of security issues, but my personal view is that it tends to be hubris to think your favorite technology is just better at security, for vague reasons.