Look in to Express bodyParser alternatives

[adamvduke]

Apparently express.bodyParser() is vulnerable to a pretty serious attack.

http://andrewkelley.me/post/do-not-use-bodyparser-with-express-js.html