Download Safari Books Online apps: Apple iOS | Android

Entire Site

Safari Books Online

    Free Trial

    Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.


    Dedication
    Advance praise for Head First Servlets & JSP™
    Praise for Head First EJB™ and the Head First approach
    Praise for the Head First approach
    Perpetrators of the Head First series (and this book)
    Intro
    Ch. 1. Why use Servlets & JSPs?
    Ch. 2. Web App Architecture
    Ch. 3. Mini MVC Tutorial
    Ch. 4. Being a Servlet
    Ch. 5. Being a Web App
    Ch. 6. Conversational state
    Ch. 7. Being a JSP
    Ch. 8. Script-free pages
    Ch. 9. Custom tags are powerful
    Ch. 10. When even JSTL is not enough...
    Ch. 11. Deploying your web app
    Ch. 12. Keep it secret, keep it safe
    OBJECTIVES
    The Bad Guys are everywhere
    And it's not just the SERVER that gets hurt...
    The Big 4 in servlet security
    A little security story
    Flex your mind
    A little security story
    How to Authenticate in HTTP World: the beginning of a secure transaction
    A slightly closer look at how the Container does Authentication and Authorization
    How did the Container do that ?
    Flex your mind
    Keep security out of the code!
    Who implements security in a web app?
    there are no Dumb Questions
    The Big Jobs in servlet security
    Just enough Authentication to discuss Authorization
    Authorization Step 1: defining roles
    Authorization Step 2: defining resource/method constraints
    The <security-constraint> rules for <web-resource-collection> elements
    Picky <security-constraint> rules for <auth-constraint> sub-elements
    The way <auth-constraint> works
    How multiple <security-constraint > elements interact
    Dueling <auth-constraint> elements
    there are no Dumb Questions
    Alice's recipe servlet, a story about programmatic security...
    Sharpen your pencil: What are the implications?
    Customizing methods: isUserInRole()
    The declarative side of programmatic security
    Sharpen your pencil
    Authentication revisited
    Implementing Authentication
    Form-Based Authentication
    Summary of Authentication types
    there are no Dumb Questions
    Sharpen your pencil
    She doesn't know about J2EE's "protected transport layer connection"
    Securing data in transit: HTTPS to the rescue
    Sharpen your pencil
    How to implement data confidentiality and integrity sparingly and declaratively
    Protecting the request data
    there are no Dumb Questions
    Sharpen your pencil
    Sharpen your pencil
    Sharpen your pencil: ANSWERS
    Sharpen your pencil: ANSWERS
    Sharpen your pencil: ANSWERS
    COFFEE CRAM
    COFFEE CRAM
    Ch. 13. The Power of Filters
    Ch. 14. Enterprise Design Patterns
    Appx. A. Final Mock Exam
    • Create BookmarkCreate Bookmark
    • Create Note or TagCreate Note or Tag
    • DownloadDownload
    • PrintPrint
    Share this Page URL
    Help

    Chapter 12. Keep it secret, keep it safe > The Bad Guys are everywhere - Pg. 619