ArticlesHandling Java Web Application Input, Part 2
Cross-site scripting describes a variety of attacks against web applications, tricking them into executing code that compromises security. In this article, Stephen Enright shows how a combination of filtering and proper encoding can prevent such attacks. Sep. 20, 2005
Handling Java Web Application Input, Part 1
Want to secure your web application? Don't leave the front door wide open. Exploits based on a failure to validate input allow attackers untold vulnerabilities to exploit, perhaps letting them execute arbitrary SQL statements. In this first of a two-part series, Stephen Enright shows you how validating incoming submissions can put a stop to such attacks. Sep. 8, 2005
|