CODEWITHSUNDEEP
javasecuritytomcatspring-mvcxss
Robert
Robert

Reputation: 1241

Protecting Spring MVC against XSS

I want to protect my app against XSS. Is there any out of the box feature I can use? An external library to secure requests on the whole application? Or a Tomcat filter/valve?

Thanks!

Upvotes: 1

Views: 359

Answers (1)

PopularIsn'tRight
PopularIsn'tRight

Reputation: 111

Options you can use:

  1. Java Encoder Project (just does encoding)
  2. HDIV (Does a couple of security things, however it doesn't do them all as well as it should).
  3. ESAPI (Does a lot of stuff, including encoding) - sorry, I can't post a second link, but you can google it. :-)

If all you want is encoding, I would go for option 1. It'll be the quickest and easiest.

Upvotes: 1

Related Questions