Static analysis on Java-EE frameworks -


there many static analysis tools capable of detecting security vulnerabilities in j2ee applications.

my question is: how tools apply java web frameworks struts or spring?

can recommend articles or pages regarding subject?

many thanks, best regards


Comments

Post a Comment

Popular posts from this blog

java - Play! framework 2.0: How to display multiple image? -

i need display gallery of photos. here template: @(photos: list[photo]) @title = { <bold>gallery</bold> } @main(title,"photo"){ <ul class="thumbnails"> @for(photo <- photos) { <li class="span3"> <a href="#" class="thumbnail"> <img src="@photo.path" alt=""> </a> </li> } </ul> } and here controller method: public static result getphotos() { return ok(views.html.photo.gallery.render(photo.get())); } and here photo bean : @entity public class photo extends model { @id public long id; @required public string label; public string path; public photo(string path, string label) { this.path = path; this.label = label; } private static finder<long, photo> find = new finder<long, photo>( long.class, photo.class); public static list<phot...
Read more

gmail - Is there any documentation for read-only access to the Google Contacts API? -

i want read-only access user's google contacts. there stackoverflow member wanted this, , received following answer : yes, there is, use https://www.googleapis.com/auth/contacts.readonly scope , "view contacts". this exchange reference read-only access google contacts can find using google. simply using access token obtained attempt read usual google contacts api (i.e. https://www.google.com/m8/feeds ) fails insufficient permissions. similarly, using google contacts api on new target fails 404 errors (for example https://www.googleapis.com/auth/contacts.readonly/default/full ). is there documentation anywhere on how use api, or permissible way access google contacts api full read-write access?
Read more

wcf binding - How to create a wsdl file for a WCF service library? -

i have wcf service library project. trying generate wsdl file launching wcf test client running in visual studio (pushed f5). launched wcf test client says "failed add service. service metadata may not accessible. make sure service running , exposing metadata.". gives me below error message. c:\users\xxx\appdata\local\temp\test client projects\10.0\354421b1-b65e-45fc-8d98-ac87254a5903\client.cs(911,26) : error cs0644: 'system.componentmodel.propertychangedeventhandler' cannot derive special class 'system.multicastdelegate' i added servive behavior expose metadata follows. not sure else missing here able generate wsdl file. help! <services> <service name="cu.customer" behaviorconfiguration="metadata"> <endpoint address="" binding="wshttpbinding" contract="cu.icustomer"> <identity> <dns value="localhost"/> </identity> </endpo...
Read more