Tagged Questions
3
votes
1answer
158 views
Is escaping the Accept header necessary?
I have a Jersey app that has been run through our corporations website vulnerability tool. It came back with a vulnerability that is quite odd. If you send in this header:
...
2
votes
1answer
561 views
Using Spring Security Without Cookies
I need to implement session management in a Spring app for a mobile browser that doesn't support cookies. Can this be done by putting the session id in the querystring of a GET request? How do you ...
2
votes
0answers
61 views
How to switch from web.xml based authorization to authorization via annotations in a JAX-RS application
I hava a working (web.xml based) container authentication and authorization. Due to the limitation of <url-pattern> I need to switch to javax.annotation.security annotations. I found out that I ...
1
vote
0answers
81 views
Java Servlet security annotation @ServletSecurity (value=@HttpConstraint)
I'm preparing to Java EE 6 Web Component Developer exam and came accross the following question.
Given the annotation for MyServlet:
@WebServlet{"/abc")
@ServletSecurity (value=@HttpConstraint)
...
1
vote
0answers
28 views
Java applet authenticity issue
I implemented an applet in java to authenticate users at my website by the usage of MIFARE cards and everything is working good. However I am concerned about the applet's authenticity, in other words, ...
1
vote
0answers
183 views
org.jboss.web.tomcat.security.JBossWebRealm Error during authenticate java.util.ConcurrentModificationException
I got below exception when I try to restart my server.
2012-06-07 17:46:14,872 ERROR [http-0.0.0.0-8080-25]-[org.jboss.web.tomcat.security.JBossWebRealm] Error during authenticate
...
0
votes
0answers
12 views
External Control of File Name- security flaw
I am forming file path in java code like below:
String strFileName1 = "/base/reports/Main.pdf";
String strSubReportPath = context.getRealPath(strFileName1);
strSubReportPath = strSubReportPath + ...
0
votes
0answers
28 views
doFilter in the formfilter is not calling the next filter (LoginFilter)
I am facing the problem while doFilter in the formfilter is called. I am expecting this to call the next filter i.e.. LoginFilter, but it's neither returning an exception not calling the next filter ...
0
votes
0answers
27 views
How do you define a LDAP security domain definition in a deployment descriptor on Jboss 7
I'm using jboss 7.1.1 and the security domain definition is placed in the standalone.xml file
<security-domain name="XXX">
<authentication>
<login-module code="LdapExtended" ...
0
votes
0answers
38 views
Do I Have a Java security-role-mapping Conflict
I have a customer service application that has various URLs. However one URL (adminquery) is reserved strictly for customer service admins, not reps on the floor. However, the entire app is only ...
0
votes
0answers
43 views
Make jetty aware of custom authenticated user
I am using jetty 7. For security we have a custom mechanism by using which I will get authenticated javax.auth.Subject instance.
No I want to attach or make jetty aware of this authenticated subject ...
jetty
0
votes
0answers
67 views
Tomcat equivalent for IBM security provider com.ibm.crypto.provider.IBMJCE
I have to migrate application for IBM Websphere to Tomcat and in the java, there is a code that uses IBM Security Provider.
Security.addProvider(new com.ibm.crypto.provider.IBMJCE())
This may be a ...
0
votes
0answers
144 views
How to create a secure web service client in android(Mutual Certificates Security)
I have successfully tested a simple soap web service using ksoap2 in android.But actually what i need is to access a web service which implements secure web service given in this example .I have ...
android
0
votes
0answers
44 views
Get the all parameter name and its default value on form submit in java
i want to Get the all parameter name and its default value on form submit.i will give web url and it will search the form on that page and if page have any form then it will get the all param name ...
0
votes
0answers
140 views
Using Java SecurityManager, Policy to deny access to certain resources for certain classes
I have the following problem:
I have a web application and there are several classes that receive and/or meddle with user input (uploading/downloading files etc.).
Well, while building some class ...
