Anatomy of an Unsafe Application
Security is arguably one of the most critical architectural components of any web-based application written in the 21st century. In an era where malware, criminals, and rogue employees are always present and actively testing software for exploits, smart and comprehensive use of security is a key element of any project for which you’ll be responsible.
This book is written to follow a pattern of development that, we feel, provides a useful premise for tackling a complex subject—taking a web-based application with a Spring 6 foundation, and understanding the core concepts and strategies for securing it with Spring Security 6. We complement this approach by providing sample code for each chapter in the form of complete web applications.
In this chapter, we will delve into an example scenario to highlight several prevalent security vulnerabilities. Our journey will commence by examining the fundamental principles of secure coding. We...