July 2018
Intermediate to advanced
356 pages
9h 18m
English
Content preview from Hands-On Security in DevOps
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
Struts security review approaches
The following table gives an example of the key review approaches for the Java struts frameworks:
|
Struts security review approaches |
Objective and references |
|
Struts security check |
The security checklist is used for developers to do struts secure implementation and review. The struts official site provides a good reference. Check out for the link at https://struts.apache.org/security/. |
|
Struts potential risks strings |
In addition to code scanning, we may also search for specific strings that can lead to struts security. For struts security, we focus more on the secure configuration, struts.xml, instead of source code. |
|
Struts exploit scripts |
To test each vulnerability of struts, it's suggested ... |