Express.js Security Working Group - View it on GitHub