This is probably a stupid question, but since Node.js is javascript, does XSS get more powerful because the server is the same language? SecuObs - L'observatoire de la sécurite internet - Site d'informations professionnelles francophone sur la sécurité informatique