September 2011
Intermediate to advanced
528 pages
19h 57m
English
Following is a summary of some of the best practices that concern application security.
Set the FrontEndHost Attribute
Because it's possible to spoof the host header, set the FrontEndHost attribute on the WebServerMBean or the ClusterMBean. When a request on a web application is redirected to an alternate location, the server uses the host you specify through the FrontEndHost attribute instead of accepting the hostname contained in the original request.
Use JSP Comment Tags
If comments in JSP files contain sensitive data, use the JSP syntax for comments instead of HTML syntax, as the JSP style comments disappear after the JSP is compiled.
use Precompiled JSPs
Consider precompiling JSPs and installing them ...
Read now
Unlock full access