Migrating away from bodyParser() in Express app with busboy?
问题 Being a newbie in Nodejs, I jumped right into writing a simple app without really reading up on good security practices. I just found out that using bodyParser() for all routes is actually a bad thing because it allows for DOS attack using multipart files. A recommended fix is to only load specific modules depending on the route. ie, for multipart fileupload, use multipart . For regular POST without file uploads (ie, text form submission), use express.json(), express.urlencoded() . Or another