Introduction
SAP's Web Application Server (WEB AS) comes in two base flavors, ABAP and J2EE (The Java 2 Platform, Enterprise Edition). Both have distinct and unique characteristics. In this chapter, we will focus on the WEB AS J2EE framework and its particular security concerns.
Before we dive in to the details of J2EE, I wanted to make one point regarding the J2EE Engine itself. In comparison to the robust and mature ABAP engine, in my opinion, the J2EE engine is in its infancy. In fact version 7.0 is really only the second major release of the platform. With that said, fixes introduced ...