Against command injection vulnerabilities, secure coding of Node.js defend.

Yoda
Node.js Secure Coding: Defending Against Command Injection Vulnerabilities