- XSS - Set appropriate headers: [helmetjs](https://github.com/helmetjs/helmet) - Input validation: [express-validator](https://express-validator.github.io/docs/) - Investigate the vulnerabilities of Tokens and what we can do to counter it.