Remember when we talked about some simple security for Meteor ? Let's continue discussing more advanced topics - we'll call this Meteor Security 201! Publications are the heart & soul of your application. Consequently, publications are where security can most easily be defeated. Understandably…
Continue ReadingWhen you get started with Meteor.js, one of the first things you learn about is how easy it is to add user accounts. Something like meteor add accounts-ui and meteor add accounts-password will get you going. So little effort to gain all that functionality so quickly! But, there is an odd thing…
Continue ReadingThe other day a curious conversation popped up in the Meteor.js Club chat room about how to handle different Stripe keys based on environment. The conversation puzzled me because Meteor settings should be set by the environment and you shouldn't need if/else statements around your settings to detect…
Continue ReadingWhen I was part of the team at Differential, we spent a lot of time thinking about best practices with a focus security and the implications of the data we exposed in publications. Having recently worked on projects that weren't build by Differential, I am starting to be exposed to other code and…
Continue Reading
