{"uuid": "8312b792-1337-41f9-b29b-b7ca36a28980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44228", "type": "seen", "source": "https://t.me/hacking_Attack/58754", "content": "Kali Linux Tutorials\nNodeSecurityShield : A Developer And Security Engineer Friendly Package For Securing NodeJS Applications\n\nNodeSecurityShield is a Developer and Security Engineer friendly package for Securing NodeJS Applications.\n\nInspired by the log4J vulnerability (CVE-2021-44228) which can be exploited because an application can make arbitrary network calls.\n\nWe felt there is an need for an application to declare what privileges it can have so that exploitation of such vulnerabilities becomes harder.\n\nTo achieve this, NSS\u00a0(Node Security Shield) has Resource Access Policy.\n\nResource Access Policy (RAP)\n\nResource Access Policy\u00a0is similar to CSP(Content Security Policy).\n\nIt lets the developer/security engineer declare what resources an application should access. And Node Security Shield\u00a0will enforce it.\n\nInstallation\n\nInstall Node Security Shield\u00a0using npm\n\nnpm install nodesecurityshield\n\nUsage\n\n// Require Node Security Shield\nlet nodeSecurityShield = require(\u2018nodesecurityshield\u2019);\n// Enable Attack Monitoring and/or Blocking\nnodeSecurityShield.enableAttackMonitoring(resourceAccessPolicy ,callbackFunction);\n\nSample resourceAccessPolicy\n\nconst resourceAccessPolicy = {\n\u201coutBoundRequest\u201d : {\n\u201cblockedDomains\u201d : [\u201c.123.com\u201d, \u201cstats.abc.com\u201d, \u2018xyz.com\u2019], \u201callowedDomains\u201d : [\u201c.domdog.io\u201d]\n}\n};\n\nSample callbackFunction\u00a0for Attack Monitoring\n\nvar callbackFunction = function (violationEvent) {\nconsole.log(violationEvent);\n}\n\nSample callbackFunction\u00a0for Attack Blocking\n\nvar callbackFunction = function (violationEvent) {\nthrow new Error(\u201cRequest Blocked. It violates declared Resource Access Policy.\u201d)\n}\n\nIntegrating with Sentry\n\nSample resourceAccessPolicyto integrate with\u00a0Sentry\n\nconst resourceAccessPolicy = {\n\u201creportUriHosts\u201d : [\u201cingest.sentry.io\u201d],\n\u201coutBoundRequest\u201d : {\n\u201cblockedDomains\u201d : [\u201c.123.com\u201d, \u201cstats.abc.com\u201d, \u2018xyz.com\u2019], \u201callowedDomains\u201d : [\u201c.domdog.io\u201d]\n}\n};\n\nFeatures\n\n* Attack Monitoring\n* Outbound Network Calls\n\n* Attack Blocking\n* Outbound Network Calls\nDownload", "creation_timestamp": "2026-09-01T20:01:35.496560Z"}