Actual URL appears to be https://www.freecodecamp.org/news/express-js-security-tips/
(I think submitter mistakenly pasted title into URL field)
Reply on news.ycombinator.com