Security for web applications is a broad field and includes a number of topics such as protecting access to resources, shielding against injection attacks of various kinds, and preventing users from being tricked into doing malicious actions on behalf of an attacker.
JSF (JavaServer Faces) supports these topics in various ways, either by providing native solutions or by integrating with the Java EE platform’s facilities. For access to resources, which includes both authentication (the caller ...
