|
|
|
|
@ -4,6 +4,21 @@
@@ -4,6 +4,21 @@
|
|
|
|
|
|
|
|
|
|
<part id="general"> |
|
|
|
|
<title>General</title> |
|
|
|
|
|
|
|
|
|
<faq id="other-concerns"> |
|
|
|
|
<question>Will Spring Security take care of all my application security requirements?</question> |
|
|
|
|
<answer> |
|
|
|
|
<p>Spring Security provides you with a very flexible framework for |
|
|
|
|
your authentication and authorization requirements, but there are many other considerations |
|
|
|
|
for building a secure application that are outside its scope. Web applications are |
|
|
|
|
vulnerable to all kinds of attacks which you should be familiar with, preferably before you |
|
|
|
|
start development so you can design and code with them in mind from the beginning. |
|
|
|
|
Check out the <a href="http://www.owasp.org/">OWASP web site</a> |
|
|
|
|
for information on the major issues facing web application developers and the countermeasures |
|
|
|
|
you can use against them. |
|
|
|
|
</p> |
|
|
|
|
</answer> |
|
|
|
|
</faq> |
|
|
|
|
<faq id="web-xml"> |
|
|
|
|
<question>Why not just use web.xml security?</question> |
|
|
|
|
<answer> |
|
|
|
|
|