Please enable JavaScript.

Coggle requires JavaScript to display documents.

Backend roadmap - Coggle Diagram

- - - - Electicity
      - light
      - radio wave
    - - IP (Internet protocol)
    - - User Datagram Protocol (UDP) is a lightweight data transport protocol that works on top of IP.
        resource
      - Transmission Control Protocol (TCP) is a transport protocol that is used on top of IP to ensure reliable transmission of packets.
  - - - Hypertext Transfer Protocol (HTTP)
        Resource
        HTTP is a protocol that's built on top of the TCP/IP protocols.
      - More about http
  - - - Javascript
        
        Performance part 1
        
        3 keys to performance
        
        Backend
        
        Gzip
        
        DB scaling
        
        Caching
        
        Load balancing
        
        CDNs
        
        Network
        
        Minimize delivery
        
        Reduce number of components page require
        
        browsers will only simultaneously download a set maximum number of files from one domain at a time (2-6)
        
        Minimize file
        
        Image
        
        11 more items...
        
        Webpack
        
        JS: UglyJS
        
        Front end
        
        progressive web app
        
        Optimized code
        
        Critical render path
        
        I. Receive HTML file -> Building the DOM
        
        Load the style tag in the <head> -> building the CSSOM
        
        Load the script right before </body>
        
        II. Receive the CSS, JS files
        
        CSS: rendered blocking
        -- Only load whatever is needed
        -- Above the fold loading
        -- Media attribute
        -- Less specification
        
        JS is a parser blocking
        -- Async and Defer
        -- Minify DOM manipulation
        -- Avoid long running javascript
      - Security
        
        Injections
        
        SQL injection
        
        Santinize input
        
        Parametrize Queries
        
        use ORMS
        
        3rd party libraries
        
        npm audit
        
        Logging
        
        express morgan
        
        winston
        
        Https everywhere
        
        SSL/TLS certificate
        http is plain text can be read
        https encrypt data between client and server
        letsencrypt.org
        cloudflare
        
        XSS and CSRF
        
        Sanitize input
        
        No eval()
        
        No document.write
        
        Content Security policy
        
        Secure and http only cookie
        
        other resource
        
        Code secret
        
        Environment variables
        
        commit history
        
        Secure headers
        
        npm install helmet
        
        Access control
        
        Data management
        
        back up
        
        limit sensitive data exposure
        
        Hash: bcrypt, scrypt, Aragon2
        Password
        
        Encrypt: pgcrypto
        sensitive data: billing address, email, phone, ...
        
        Authentication