GitHub - nicolasvisci/Secure-Web-App: Web application written in java with the goal of meeting the guidelines for developing secure applications in java.

Web application written in java with the goal of meeting the guidelines for developing secure applications in java.

Lifetime of sensitive data
Cookies
Cross-site scripting (XSS)
Session http
https: SSL/TLS with Apache Tomcat
Accessing the DBMS via SSL/TLS
File Upload with Apache Tika
- Checking file format and content, and possibly removing malicious scripts
Sql Injection
Prepared Statement via JDBC
Password Management
- Passwords are concatenated to a salt and then hashed using SHA-256 algorithm
Keys & Encryption
- Cookies are encrypted through AES encryption in CBC mode by applying eventual padding

Name		Name	Last commit message	Last commit date
Latest commit History 20 Commits
.settings		.settings
WebContent		WebContent
src		src
.classpath		.classpath
.gitignore		.gitignore
.project		.project
README.md		README.md