java - General hardening tips for a Apache Tomcat JSP application -



java - General hardening tips for a Apache Tomcat JSP application -

i developing quite straightforward crud webapplication company. using apache tomcat 6.0 , jstl 1.2

the application on road beingness finished , withstands constructive testing , basic mischief such invalid input format in forms.

the security level doesn't have high since it's internal use, still i'd have basics covered.

i trying harden , or accomplish failsafety/exceptionsafety , looking general hints , tipps usualy error sources lie.

what have thought of:

sql injection ('fixed' using prepared statements) fail gracefully on sql-exceptions range checking on parameters such pagenumbers

what recommendations this?

thanks in advance

the owasp (open web application security project) guide on tomcat pretty thorough. many first-class resources on site.

java security jsp jstl

Comments

Post a Comment

Popular posts from this blog

c# - Move local mssql database to webhosted MYSQL -

c# - Move local mssql database to webhosted MYSQL - i'm dektop developer , don't know much how webhosting work... please help me here. currently app works mssql database installed locally on same machine. need go wider , allow multiple apps work same database on internet. have webhosting cpanel in , mysql database. please tell me how can access tables in mysql database computers? select , update records in table. have implement functionality using php create such requests? please advise.. exporting raw ms-sql dumps not work if seek import mysql because there differences in syntax. there commercial programs available help migrate data, otherwise might improve code php programme export mssql mysql. but question sounds more you're asking how access databases remotely. . php can natively. when create link database specify host. example: $databaseconnection = new mysqli('username','password','host_ip_address'); if you're...
Read more

java - How to pass parameters between Request-Scoped Controllers? -

java - How to pass parameters between Request-Scoped Controllers? - i have simple jsf-page , want pass parameter page1 page2. every page has own controller in request scope. the 2 controllers this: controller1: @component("requestcontroller1") @scope("request") public class requestcontroller1 { private list<product> products; private product selectedproduct; @postconstruct public void init() { //load products db } public void setproducts(list<product> products) { this.products = products; } public list<product> getproducts() { homecoming products; } public void setselectedproduct(product selectedproduct) { this.selectedproduct = selectedproduct; } public product getselectedproduct() { homecoming selectedproduct; } controller2: @component("requestcontroller2") @scope("request") public class requestcontroller2 { private long selectedproductid; @postconstruct public void init() ...
Read more

string - what is the difference between "some" == "some\0" and strcmp("some","some\0") in c++? -

string - what is the difference between "some" == "some\0" and strcmp("some","some\0") in c++? - what difference between "some" == "some\0" , strcmp("some","some\0") in c++? why if("some" == "some\0") returns false , if(!strcmp("some","some\0")) returns true ? see next diagram. shows 2 strings in memory, content in box, beside box you'll see address of each one. when you're doing if("some" == "some\0") comparing addresses. translated if (0xdeadbeef == 0x0badcafe) false. when utilize strcmp , compare content of each box until reach \0 in each of them. that's why sec test returns true. if alter first test if("some" == "some") compiler may potentially see same strings , store them once. means test transform if (0x0badcafe == 0x0badcafe) true. c++ string comparison
Read more