Hands-On Security in DevOps

Java web security framework

As discussed earlier, the adoption of a web security framework will help us to handle lots of security controls. Take Spring Security as an example—a few edits of the XML configuration will not only provide login/logout form authentication but also CSRF attack, session, and HTTP security header (HSTS, X-content-type, XSS, X-Frame-Options) protection:

Java security framework	Key characteristics
Spring Security	The Spring Security framework is only for Java- and Spring-based applications. It provides lots of out-of-box security controls such as user authentication, CSRF attack protection, session fixation protection, a HTTP security header, and URL access control. Also, it supports various kinds of authentication ...