Bipin Mistry

Bipin Mistry

Bipin Mistry is Sr. Director of Product Management for WAS/IAST product line.  Prior to joining Veracode he was VP Product Management for NEC/Netcracker in their SDN/NFV and Security business unit.  At NEC/Netcracker Bipin’s primary focus is to develop solutions and architectures specifically mapped to NFV/SDN and Orchestration. He has over 28 years expertise in Security, Software Architectures, Mobile and Core Networking Technologies, Product Management, Marketing, Engineering and Sales.  Prior to joining NEC/Netcracker Bipin was VP President of Product Management for a security startup in the field of DDoS analysis and mitigation.  Bipin has also held architectural and…

Stay up to date on Application Security

Posts by Bipin Mistry
  • How to Prevent Unsafe Redirects in Node…
    | By Bipin Mistry

    What are Unsafe Redirects? Unsafe or unvalidated redirects are important security considerations for any web developer. Express provides native support for redirects, making them easy to implement and use. However, Express leaves the work of performing input validation to the developer. Here's the…

    Read Article
     
  • Node.js Template Engines: Why Default…
    | By Bipin Mistry

    Escaping is an important security control for preventing cross-site scripting (XSS) in web applications. Escaping is the process of converting certain characters, like <, >, quotation markets, etc. into safe characters. By escaping, you reduce the likelihood of the browser rendering certain…

    Read Article
     
  • Fasten your Helmet.js (Part 2): Locking…
    | By Bipin Mistry

    In our previous post, we discussed the importance of securing your HTTP headers and how Helmet.js can make this easy for apps that use Express. Helmet.js’s Github page has a wealth of documentation on how to tweak different security header configurations. For this post, we’ll focus on tuning the…

    Read Article
     
  • Fasten Your Helmet.js (Part 1):…
    | By Bipin Mistry

    Helmet.js is a useful Node.js module that helps you secure HTTP headers returned by your Express apps. HTTP headers are an important part of the HTTP protocol, but are generally transparent from the end-user perspective. The headers provide important metadata about the HTTP request or response so…

    Read Article
     
  • How to Prevent SQL Injection in Node.js
    | By Bipin Mistry

    While Node.js can help improve developer productivity, it’s prone to SQL injection bugs as much as any other modern programming language in use today. In this article, we walk through a SQL injection issue, it’s impact, and how to fix it. A classic example using MySQL Imagine a web app that…

    Read Article