- use either only node.js runtime or web-standards-based framework like Hono - URL, URLSearchParams, Headers web apis. node.js querystring api - explain the path traversal attacks - HTTP methods, paths, wildcards, headers, mime type - Streams and resumable download - No need to accept the form data + verify the data integrity via checksums - how to gzip and cache - validation and sanitization when accepting the content from a client (show how an attack can be made) - rate limiting - live editing via websockets - tls/ssl - auth and permissions - ci/cd