What are the main security concerns when building a Node.js/Express API? How do you protect against common vulnerabilities?

Sample answer preview

## Main Security Concerns 1. **Injection attacks** (SQL, NoSQL, Command) 2. **Cross-Site Scripting (XSS)** 3. **Broken authentication** 4. **Sensitive data exposure** 5. **Security misconfiguration** ## 1.