Avoiding Templates injection The best way to prevent server-side template injection is to not allow any users to modify or submit new templates. Read more
Avoiding other injections Secure coding practices prescribe that spring expressions using dynamic values should be avoided. Read more
Avoiding injection vulnerabilities Injection attacks refer to a broad class of attack vectors. In an injection attack, an attacker supplies untrusted input to… Read more
Avoiding XSS injection vulnerabilities In this section, we'll describe some general principles for preventing cross-site scripting vulnerabilities and ways of using various common technologies Read more
Avoiding OS command injection Every command call and dynamic code generation method is a ticking bomb and must be handled accordingly. Read more