Security in Java EE Application with JBoss
2 answers
- Use HTTPS
- Use Jasypt to simplify some things.
- Restrict external access point.
- Make sure you don't have a single point of failure.
- Make sure the communication channels are properly secured when needed.
- Safe access to components by whitelisting (grant access instead of removing access).
- Make sure the state is saved on the server side.
- Test test test ...
- Keep updating security vulnerabilities .
- The rest is good design.
+2
source to share
Don't trust anyone outside of your control. The main, most important aspect of this: Don't believe that the input for your POST / GET handlers comes from the forms you design.
Confirm all client input, especially before using it to interact with SQL, HQL, other external data sources, or the command line.
+1
Steve
source
to share