Developer's Guide to Web Application Security

472 Index

Java Cryptography Extension

(JCE)

function of, 234, 287

message digests with, 264

Java Development Kit (JDK),

228–229, 231–232

Java protected domains

for access to system resources,

242

description of, 250–251

Java Runtime Environment (JRE),

229–232

Java Secure Socket Extension, 234

Java security architecture

goals of, 232–233

Java applets and, 238–239

Java security model, 233–236

sandbox, 236–237

sandbox settings, changing,

240–241

Java Security Manager, 251–252,

294

Java Security Model, 233–236

Java Server Pages (JSP)

code auditing, 204

external objects/libraries, 220

functions that take filenames, 217

Java Virtual Machine (JVM)

bytecode verifier, 246–250

class loaders, 242–245

function of, 230

as Java emulator, 91

Java protected domains, 250–251

Java security ...