Chapter 9. Web Application Security

Web applications are essentially server-side software applications. They are usually part of websites and accessed by human users through Web browsing software such as MS Internet Explorer or Netscape Navigator. The Web browsing software, or simply the browser, addresses a Web application through its URL and communicates with it by sending HTTP requests and receiving HTTP responses, either over an intranet or the Internet. In this regard, a Web application is like any other server software.

A distinguishing characteristic is the fact that the same browser can be used to access any number of Web applications, without requiring application-specific client programs to be installed on each client machine. This ...

Get J2EE™ Security for Servlets, EJBs and Web Services: Applying Theory and Standards to Practice now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.