Web Container Security Features

The Web container plays an important role in building and deploying secure Web applications. The servlet specification outlines what security features should be part of the environment provided by the Web container and how a specific Web application should make use of them. However, as we soon find out, not all aspects are fully standardized. We will rely on the Tomcat-specific conventions to realize these non-standard features. Such non-standard conventions are clearly marked in the text.

As we go through the security features, we modify our sample application RMB to incorporate some of these features. A modified version of the sample application, with a complete set of security features, is available as RMB2, ...

Get J2EE™ Security for Servlets, EJBs and Web Services: Applying Theory and Standards to Practice now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.