• Addition of details on SSRF, Context specific XSS validations
• Defect fixes
• Updates to target Node.js version
• Optimization to Docker config
• Addition of integration tests with cypress
• Travis CI integration

• Additional vulnerability examples
• Update insecure dependencies
• Fix documentation typos

This release includes:

1. Code changes to use Express 4.x
2. Deployment options for the NodeGoat app via a Docker image and "Deploy on Heroku" button
3. Security tests using Zap API

Release Notes:

• Improvements to tutorial and addition of screencasts
• Improved login page design
• Changes to profile module to better demonstrate CSRF attack

Changes since previous release:

1. Allows to set optional MONGODB_URL env variable
2. Fix for issue #33